Re: system catalogs

} In article <41ba3p$9et@dub-news-svc-4.compuserve.com>, } <102076.2137@compuserve.com> wrote: } > } > trvsryhn@dordt.edu (Travis Rayhons) writes: } >> I am developing a database of all the permissions of my users to } >>each database that they use. This way I can determine what } >>permissions that each user has and keep access to certain databases } >>very secure by revoking everyone else. } >> I was wondering what harm or side effects could be had if I } >>directly modify the tables: sysusers, systabauth, syscolauth. } >>What I want to do is revoke all priviledges from everyone and } >>then grant only those permissions that are needed. This is the } >>next stage in implementation and I just want to make sure that I } >>can't mess anything up. } >> } } scheer@stadt-mh.de (Dirch Scheer) writes: } Hi Travis, } } you should better use the sql-commands GRANT and REVOKE instead of directly } manipulating the systables. These commands will do everything for you. Hope } that helps... Yes, yes, yes. You can still do a select from the system tables to find the current priviledges of your users. But do use revoke to remove them and grant to give the new priviledges. When you have done this you have a utility that would be very interesting for us and possibly many others. May be you'l make it available? I realize it isn't that difficult to write, but you now, time, time, time... Nils.Myklebust@ccmail.telemax.no NM-data, Dalsbergstien 7, N-0170 Oslo, Norway My opinions are those of my company