GRANT PRIVILEGES

[NEW in v4.0]

This command allows you to assign privileges to a Valentina Server user.

privilege_def
    :    GRANT privileges TO grantee_list 

privileges
    :    object_privileges ON [object_type] object_name

object_privileges
    :    { ALL | privilege_list } [PRIVILEGES]

privilege_list
    : privilege, ...

privilege
    : NONE | READ | INSERT | UPDATE | DELETE

object_type
    :   DATABASE | PROJECT

object_name
    :    IDENT.*

grantee_list
    :    character_string_literal [, ...]

object_type

the type of object for which privileges are granted. If not specified then DATABASE is assumed.

object_name

the name of the object for which privileges are granted.

privileges

It could be ALL or one of the following:

• NONE - No privileges.
• READ - Read privilege.

• INSERT - Insert privilege.
• UPDATE - Update privilege.
• DELETE - Delete privilege.

grantee_list

the list of users who are grantees of privileges for object_name.

This command forces Valentina Server to grant privileges for a particular object to users mentioned in the grantee list. This command is available for the ADMINISTRATOR of the vserver only.

If the server variable PrivilegesEnable is set to zero (see vServer ini-file for details) no privileges checks are performed at all. It means all users are granted for any db operation (granted privileges are still stored but play no role in this mode).

• ERR_CONNECTION_OPERATION_NOT_PERMITTED - Valentina is running in local mode or the query-issuer is not an administrator of Valentina Server.

• ERR_CONNECTION_USER_NOT_EXISTS - some user mentioned in grantee_list is not exist.

• ERR_DB_NOT_FOUND - database with the specified name is not registered to Valentina Server.

• ERR_DB_IDENTIFIER_NOT_FOUND - The database does not contain the object with the specified name.

Example:

User1 should have all privileges to work with db1:

GRANT ALL ON db1.* TO 'User1';

Example:

User1 should be able to insert new data into the database (but he is not able to delete, update data or alter database schema):

GRANT INSERT ON db1.* TO 'User1';

Example:

User1 should be able to insert and delete data (but he is not able to update data or alter database schema):

GRANT INSERT, DELETE ON db1.* TO 'User1';