Permissions of groups, Referring to tables owned by groups – Sybase 12.4.2 User Manual

Page 385

Advertising
background image

CHAPTER 10 Managing User IDs and Permissions

365

2

Double-click the Users and Groups folder for that database, to open it.
Groups are displayed in the left panel, and both users and groups are
displayed in the right panel.

3

In the right panel, select the users you want to add to a group, and drag
them to the group.

For more information, see the Sybase Central online Help.

Permissions of groups

Permissions may be granted to groups in exactly the same way as to any other
user ID. Permissions on tables, views, and procedures are inherited by
members of the group, including other groups and their members. There are
some complexities to group permissions that database administrators need to
keep in mind.

Notes

The DBA, RESOURCE, and GROUP permissions are not inherited by the
members of a group. Even if the

personnel

user ID is granted RESOURCE

permissions, the members of

personnel

do not have RESOURCE permissions.

Ownership of database objects is associated with a single user ID and is not
inherited by group members. If the user ID

personnel

creates a table, then the

personnel

user ID is the owner of that table and has the authority to make any

changes to the table, as well as to grant privileges concerning the table to other
users. Other user IDs who are members of

personnel

are not the owners of this

table, and do not have these rights. If, however, SELECT authority is explicitly
granted to the

personnel

user ID by the DBA or by the

personnel

user ID itself,

all group members do have select access to the table. In other words, only
granted permissions are inherited.

Referring to tables owned by groups

Groups are used for finding tables and procedures in the database. For
example, the query

SELECT * FROM SYSGROUPS

will always find the table SYSGROUPS, because all users belong to the
PUBLIC group and PUBLIC belongs to the SYS group which owns the
SYSGROUPS table. (The SYSGROUPS table contains a list of group_name,
member_name pairs representing the group memberships in your database.)

Advertising