Sybase Adaptive Server IQ 12.4.2, Administration And Performance Manual

Page: 378 / 536

Managing individual user IDs and permissions
358
GRANT CONNECT TO
userid IDENTIFIED BY password
The same command can also be used to add a new user. For this reason, if you
inadvertently enter the user ID of an existing user when you mean to add a new
user, you are actually changing the password of the existing user. You do not
receive a warning because this behavior is considered normal. This behavior
differs from pre-Version 12 Adaptive Server IQ.
To avoid this situation, use the system procedures
sp_addlogin
and
sp_adduser
to add users. These procedures give you an error if you try to add an existing
user ID, as in Adaptive Server Enterprise and pre-Version 12 Adaptive Server
IQ.
Changing the DBA
password The default password for the DBA user ID for all databases is SQL. You should
change this password to prevent unauthorized access to your database. The
following command changes the password for user ID DBA to new_password:
GRANT CONNECT TO DBA
IDENTIFIED BY new_password
If you are using DBISQL, it is a good idea to put your permission grants into a
command file for reference and so that it can be modified and run again if it is
necessary to recreate the permissions.
Granting DBA and resource authority
DBA and RESOURCE authority are granted in exactly the same manner as
each other.
❖
To grant resource permissions to a user ID:
1 Connect to the database as a user with DBA authority.
2 Type and execute the SQL statement:
GRANT RESOURCE TO userid
For DBA authority, the appropriate SQL statement is:
GRANT DBA TO userid
Notes
• Only the DBA can grant DBA or RESOURCE authority to database users.
• DBA authority is very powerful, granting the ability to carry out any
action on the database and access to all the information in the database. It
is generally inadvisable to grant DBA authority to more than a very few
people.