DB2 Help

Use this box to list and select the users to whom you want to grant privileges on the selected table, and users whose privileges on this table you want to revoke. Initially, this box lists the users that already hold privileges on this table. To add other users to the box, click on Add User and select the users' authorization names on the Add User window.

Next to each user's authorization name, this box displays symbols that indicate whether the user holds privileges on the selected table, and whether grants and revocations of privileges are pending. These symbols change to reflect changes that you make when you use the Privileges boxes or the Grant All or Revoke All push buttons.

The symbols are:

Check marks: An unframed check mark in a column for a privilege means that a user has the privilege without the Grant option. Corner brackets around the check mark indicate that a grant of this privilege, without the Grant option, is pending.
Double check marks: An unframed double check mark in a column for a privilege means that a user has the privilege with the Grant option. Corner brackets around the double check mark indicate that a grant of this privilege, with the Grant option, is pending.
Xs: An unframed X in a column for a privilege means that a user doesn't have the privilege. Corner brackets around the X indicate that a revocation of the privilege is pending.

Add User

Click on this push button to open the Add User window, so that you can supply the User box with authorization names of users that hold no privileges on the selected table.

Grant All

Click on this push button to grant to the selected users or groups whatever privileges they don't hold on the selected table. Grant All also provides the Grant option -- the right to grant a privilege to other users and groups -- on all privileges except CONTROL.

When you click on Grant All:

To the right of the selected users or groups, Xs and single check marks change to double check marks framed by corner brackets. (Exception: An X in the CONTROL column changes to a single check mark framed by corner brackets.) The brackets indicate that the grants that you requested are pending.
The CONTROL box specifies Yes. The other Privileges boxes specify Grant.

Revoke All

Click on this push button to revoke all privileges that the selected users or groups hold on the selected table.

When you click on Revoke All:

In the columns for the privileges that you're revoking, check marks change to Xs framed by corner brackets. The brackets indicate that the revocation that you requested is pending.
The boxes for the privileges that you're revoking specify No.

SELECT

This box indicates whether the selected users or groups hold the SELECT privilege, with the Grant option, on the selected table. To change the box's setting, click on the down arrow and select the setting that you want. You can select:

Yes: Grants the SELECT privilege without the Grant option (the right to grant the SELECT privilege on the selected table to other users and groups). If a user or group already has the SELECT privilege with the Grant option, Yes revokes the privilege and re-grants it without the option.
No: Revokes the SELECT privilege.
Grant: Grants the SELECT privilege with the Grant option. If the user or group already has SELECT without the Grant option, Grant provides the option.

The SELECT privilege allows a user to retrieve rows from a table, to use the EXPORT utility to do so, and to create views on the table.

If you select multiple users or groups for whom you specified different settings (for example, Yes for one user andNo for the others), the SELECT box is blank. But the settings that you specified remain in effect.

INSERT

This box indicates whether the selected users or groups hold the INSERT privilege, with the Grant option, on the selected table. To change the box's setting, click on the down arrow and select the setting that you want. You can select:

Yes: Grants the INSERT privilege without the Grant option (the right to grant the INSERT privilege on the selected table to other users and groups). If a user or group already has the INSERT privilege with the Grant option, Yes revokes the privilege and re-grants it without the option.
No: Revokes the INSERT privilege.
Grant: Grants the INSERT privilege with the Grant option. If a user or group already has INSERT without the Grant option, Grant provides the option.

The INSERT privilege allows a user to insert rows into a table, and to use the IMPORT utility to do so.

If you select multiple users or groups for whom you specified different settings (for example, Yes for one user andNo for the others), the INSERT box is blank. But the settings that you specified remain in effect.

UPDATE

This box indicates whether the selected users or groups hold the UPDATE privilege, with the Grant option, on the selected table. To change the box's setting, click on the down arrow and select the setting that you want. You can select:

Yes: Grants the UPDATE privilege without the Grant option (the right to grant the UPDATE privilege on the selected table to other users and groups). If a user or group already has the UPDATE privilege with the Grant option, Yes revokes the privilege and re-grants it without the option.
No: Revokes the UPDATE privilege.
Grant: Grants the UPDATE privilege with the Grant option. If a user or group already has UPDATE without the Grant option, Grant provides the option.

The UPDATE privilege allows a user to update a table.

If you select multiple users or groups for whom you specified different settings (for example, Yes for one user andNo for the others), the UPDATE box is blank. But the settings that you specified remain in effect.

DELETE

This box indicates whether the selected users or groups hold the DELETE privilege, with the Grant option, on the selected table. To change the box's setting, click on the down arrow and select the setting that you want. You can select:

Yes: Grants the DELETE privilege without the Grant option (the right to grant the DELETE privilege on the selected table to other users and groups). If a user or group already has the DELETE privilege with the Grant option, Yes revokes the privilege and re-grants it without the option.
No: Revokes the DELETE privilege.
Grant: Grants the DELETE privilege with the Grant option. If a user or group already has DELETE without the Grant option, Grant provides the option.

The DELETE privilege allows a user to delete rows from a table.

If you select multiple users or groups for whom you specified different settings (for example, Yes for one user andNo for the others), the DELETE box is blank. But the settings that you specified remain in effect.

CONTROL

This box indicates whether the selected users or groups hold the CONTROL privilege on the selected table. To change the box's setting, click on the down arrow and select the setting that you want. You can select:

Yes: Grants the CONTROL privilege.
No: Revokes the CONTROL privilege.

With the CONTROL privilege on a table, a user:

Acquires all other privileges on the table-- SELECT, INSERT, UPDATE, DELETE, ALTER, INDEX, and REFERENCES
Can grant these other privileges to other users of the table
Can drop the table
Can execute the RUNSTATS utility against the table and its indexes

If you select multiple users or groups for whom you specified different settings (for example, Yes for one user andNo for the others), the CONTROL box is blank. But the settings that you specified remain in effect.

ALTER

This box indicates whether the selected users or groups hold the ALTER privilege, with the Grant option, on the selected table. To change the box's setting, click on the down arrow and select the setting that you want. You can select:

Yes: Grants the ALTER privilege without the Grant option (the right to grant the ALTER privilege on the selected table to other users and groups). If a user or group already has the ALTER privilege with the Grant option, Yes revokes the privilege and re-grants it without the option.
No: Revokes the ALTER privilege.
Grant: Grants the ALTER privilege with the Grant option. If a user or group already has ALTER without the Grant option, Grant provides the option.

The ALTER privilege on a table allows a user to:

Add columns to the table
Create or drop a primary key, a check constraint, or a trigger
Create or drop a foreign key, provided that the user also has the REFERENCES privilege on the parent table
Add or change a comment on a table

If you select multiple users or groups for whom you specified different settings (for example, Yes for one user andNo for the others), the ALTER box is blank. But the settings that you specified remain in effect.

INDEX

This box indicates whether the selected users or groups hold the INDEX privilege, with the Grant option, on the selected table. To change the box's setting, click on the down arrow and select the setting that you want. You can select:

Yes: Grants the INDEX privilege without the Grant option (the right to grant the INDEX privilege on the selected table to other users and groups). If a user or group already has the INDEX privilege with the Grant option, Yes revokes the privilege and re-grants it without the option.
No: Revokes the INDEX privilege.
Grant: Grants the INDEX privilege with the Grant option. If a user or group already has INDEX without the Grant option, Grant provides the option.

The INDEX privilege allows a user to create an index on a table.

If you select multiple users or groups for whom you specified different settings (for example, Yes for one user andNo for the others), the INDEX box is blank. But the settings that you specified remain in effect.

REFERENCES

This box indicates whether the selected users or groups hold the REFERENCES privilege, with the Grant option, on the selected table. To change the box's setting, click on the down arrow and select the setting that you want. You can select:

Yes: Grants the REFERENCES privilege without the Grant option (the right to grant the REFERENCES privilege on the selected table to other users and groups). If a user or group already has the REFERENCES privilege with the Grant option, Yes revokes the privilege and re-grants it without the option.
No: Revokes the REFERENCES privilege.
Grant: Grants the REFERENCES privilege with the Grant option. If a user or group already has REFERENCES without the Grant option, Grant provides the option.

The REFERENCES privilege allows a user to create and drop a foreign key.

If you select multiple users or groups for whom you specified different settings (for example, Yes for one user andNo for the others), the REFERENCES box is blank. But the settings that you specified remain in effect.

Group page

Group

Add Group

Grant All

Revoke All

SELECT

INSERT

UPDATE

DELETE

CONTROL

ALTER

INDEXES

REFERENCES

Cancel

Apply

Reset

Show SQL

Group

This box consists of a Group column and a column for each table privilege. The Group column lists groups by authorization name.

Use this box to list and select the groups to which you want to grant privileges on the selected table, and groups whose privileges on this table you want to revoke. Initially, this box lists the groups that already hold privileges on this table. To add other groups to the box, click on Add Group and select the groups' authorization names on the Add Group window.

Next to each group's authorization name, this box displays symbols that indicate whether the group holds privileges on the selected table, and whether grants and revocations of privileges are pending. These symbols change to reflect changes that you make when you use the Privileges boxes or the Grant All or Revoke All push buttons.