473,809 Members | 2,695 Online
Bytes | Software Development & Data Engineering Community
+ Post

Home Posts Topics Members FAQ

Views and privileges

Hi DB2 gurus! Question for you all. Is the following possible (mainly
the last two bullets)?

* Already have table called XYZ of information keyed by SSNs.
* Create an xref table for SSNs to employee numbers. We'll call this
table XREF.
* Create a view that joins XYZ and XREF, showing all columns of XYZ,
but with the employee number instead of SSN.
* Remove select access on XYZ and XREF for all users.
* Users can perform selects on the view.

Thanks,
Mike

Feb 20 '06 #1
2 1322
rh************@ yahoo.com wrote:
Hi DB2 gurus! Question for you all. Is the following possible (mainly
the last two bullets)?

* Already have table called XYZ of information keyed by SSNs.
* Create an xref table for SSNs to employee numbers. We'll call this
table XREF.
* Create a view that joins XYZ and XREF, showing all columns of XYZ,
but with the employee number instead of SSN.
* Remove select access on XYZ and XREF for all users.
* Users can perform selects on the view.

Thanks,
Mike

Sure, no problem. Just make ser you have at least an informational (NOT
ENFORCED) RI constraint, so DB2 knows it can internally substitute and
do join elimination whenever the empno is not required.

Cheers
Serge
--
Serge Rielau
DB2 Solutions Development
IBM Toronto Lab
Feb 20 '06 #2
rh************@ yahoo.com wrote:
Hi DB2 gurus! Question for you all. Is the following possible (mainly
the last two bullets)?

* Already have table called XYZ of information keyed by SSNs.
* Create an xref table for SSNs to employee numbers. We'll call this
table XREF.
* Create a view that joins XYZ and XREF, showing all columns of XYZ,
but with the employee number instead of SSN.
* Remove select access on XYZ and XREF for all users.
* Users can perform selects on the view.


That's perfectly fine and the traditional mechanism to implement more
fine-grained access rules.

--
Knut Stolze
DB2 Information Integration Development
IBM Germany
Feb 20 '06 #3

This thread has been closed and replies have been disabled. Please start a new discussion.

Similar topics

3
2724
by: Marc | last post by:
Hello, I have 3 users in my MySQL server. One of them has Grant access (actually: all privileges). I cannot login as this user using phpMyAdmin - my password is not accepted (though I' m sure it must be the right one). I CAN login as any of the other users. When I do this and choose 'privileges' I get the overview: User - Host - Password - Global Privileges - Grant - Action I can see the user with all privileges, but the cell under...
4
99028
by: Amardeep Verma | last post by:
Hi, I have a quick question. Which role/privileges are required before a user can give the statement "GRANT ALL PRIVILEGES"? Thanking you in Advance Have a nice day
0
10587
by: Charles Cantrell | last post by:
I have recently set up mySQL on a Mandrake release of Linux (Version 7 of Mandrake, I believe), using the binary 4.0.13 standard release. The set up and start up all were normal, as far as I could tell, with no warnings or error messages. In nearly all respects, the database appears to be running as expected. I have the book "PHP and mySQL Web Development" by Luke Welling and Laura Thomson, and have been working through the examples...
2
2207
by: virgilio | last post by:
Hi all, "Administrator Guide Implementation" DB2 8.2, chapter 7, section "Indirect privileges through a package" states: (highlight >>>>!!!<<<<) "Privileges granted to individuals binding the package and to PUBLIC are used for authorization checking when static SQL is bound. Privileges granted through groups are >>>>not!!!!<<<< used for authorization checking when static SQL is bound. The user with a valid authID who binds a package...
4
12888
by: Feldman Alex | last post by:
Hi all, I need to know the user privileges (does user have administrator privileges) .. Which c# api's should i use? Thanks a lot
0
1033
by: Ulrich Meis | last post by:
Hi! Situation two schemas: webviews: Contains a set of views with insert rules on them, accessed via a GUI. devconf: "Business logic", all the tables, functions, triggers that I want to restrict access to as far as possible.Preferably, I wouldn't even grant usage to the schema.
0
4654
by: EricBlair | last post by:
Hello, I wrote a windows service that is supposed to start an interactive GUI app. I realize a service will not readily do this so I've pieced together the code below to bypass that. However, the call to CreateProcessAsUser always returns a 1314 error: 'A required privilege is not held by the client.' I realize from the doc's that the calling process must have SE_TCB_NAME privilaege to assign new privileges to the new process and I have done...
3
1153
by: John Dohn | last post by:
I can work with them just fine in VS but when I run my app, I get a select permission denied error on any view and execute permission denied on any SP in my web app. All was worked fine until Friday and not since then. Win Server 2003 SP4 VS 2003 ASP.NET 1.1 IIS 6.0
7
4661
by: Gary | last post by:
Hello guys! Bear with me, I am a newbie. She is the Data Warehouse manager. She has about 50 users to use the Oracle database from M$ Access via ODBC connection. All those users have only SELECT privileges on certain tables. I built all the roles and users for them and they work fine. Then she asked "Why do YOU let them see all those system tables?",
1
1643
by: Troels Arvin | last post by:
Hello, Quoting http://publib.boulder.ibm.com/infocenter/db2luw/v9r5/topic/ com.ibm.db2.luw.sql.ref.doc/doc/r0000935.html : Group privileges are not considered for any table or view specified in the CREATE VIEW statement. I discovered this today because a user complained that she couldn't create a simple view referring to a table to which she had all privileges.
0
10376
jinu1996
by: jinu1996 | last post by:
In today's digital age, having a compelling online presence is paramount for businesses aiming to thrive in a competitive landscape. At the heart of this digital strategy lies an intricately woven tapestry of website design and digital marketing. It's not merely about having a website; it's about crafting an immersive digital experience that captivates audiences and drives business growth. The Art of Business Website Design Your website is...
1
10383
by: Hystou | last post by:
Overview: Windows 11 and 10 have less user interface control over operating system update behaviour than previous versions of Windows. In Windows 11 and 10, there is no way to turn off the Windows Update option using the Control Panel or Settings app; it automatically checks for updates and installs any it finds, whether you like it or not. For most users, this new feature is actually very convenient. If you want to control the update process,...
0
10120
tracyyun
by: tracyyun | last post by:
Dear forum friends, With the development of smart home technology, a variety of wireless communication protocols have appeared on the market, such as Zigbee, Z-Wave, Wi-Fi, Bluetooth, etc. Each protocol has its own unique characteristics and advantages, but as a user who is planning to build a smart home system, I am a bit confused by the choice of these technologies. I'm particularly interested in Zigbee because I've heard it does some...
1
7661
isladogs
by: isladogs | last post by:
The next Access Europe User Group meeting will be on Wednesday 1 May 2024 starting at 18:00 UK time (6PM UTC+1) and finishing by 19:30 (7.30PM). In this session, we are pleased to welcome a new presenter, Adolph Dupré who will be discussing some powerful techniques for using class modules. He will explain when you may want to use classes instead of User Defined Types (UDT). For example, to manage the data in unbound forms. Adolph will...
0
6881
by: conductexam | last post by:
I have .net C# application in which I am extracting data from word file and save it in database particularly. To store word all data as it is I am converting the whole word file firstly in HTML and then checking html paragraph one by one. At the time of converting from word file to html my equations which are in the word document file was convert into image. Globals.ThisAddIn.Application.ActiveDocument.Select();...
0
5688
by: adsilva | last post by:
A Windows Forms form does not have the event Unload, like VB6. What one acts like?
1
4332
by: 6302768590 | last post by:
Hai team i want code for transfer the data from one system to another through IP address by using C# our system has to for every 5mins then we have to update the data what the data is updated we have to send another system
2
3861
muto222
by: muto222 | last post by:
How can i add a mobile payment intergratation into php mysql website.
3
3015
bsmnconsultancy
by: bsmnconsultancy | last post by:
In today's digital era, a well-designed website is crucial for businesses looking to succeed. Whether you're a small business owner or a large corporation in Toronto, having a strong online presence can significantly impact your brand's success. BSMN Consultancy, a leader in Website Development in Toronto offers valuable insights into creating effective websites that not only look great but also perform exceptionally well. In this comprehensive...

By using Bytes.com and it's services, you agree to our Privacy Policy and Terms of Use.

To disable or enable advertisements and analytics tracking please visit the manage ads & tracking page.