Grant Option

> Hey guys! I'm a little stymied here. I need to be able to grant > SELECT privileges only on all the tables in a database to certain > users. > I've written a little (isqlperl) script to do this, but cannot cleanly > GRANT SELECT on all tables (even as Informix), since the tables were > created by different people. I get the error message: > 302: No Grant option or illegal option on multi-table view> (its definitely not a multi-table view) > It appears I would have to become to creator of each table, and user the > "WITH GRANT OPTION" to accomplish such a feat. I must be missing > something. > As informix, or a user with DBA, how may I GRANT SELECT table by > table without becoming the explicit owner of each table? Shouldnt > the DBA be able to do anything? Naomi I hate to disappoint you but the ANSI standard is that only the owner of a table can grant privileges OR the owner must grant the privilege to grant privileges to another user. I run into this problem all the time.Each table owner must to something like the following: GRANT ALL ON tablename to dba_username WITH GRANT OPTION; The dba_username can then grant privileges to everyone else. Howvere if the orginal owner revokes the privilege form the dba_username, ALL users that have granted privileges by dba_username to will also be revoked. This is one of the best reasons to have a dba login id ( not a user who may come or go ) create your production databases and all tables. > > While we are on this subject, can someone explain dbaccess and its > features to me? Maybe that will be a better solution. > dbaccess comes with the Informix engines in 5.0++ releases and is the same as isql minus forms and reports. Regards - Lester ############################################################################# # Lester Knutsen lester@access.digex.net # # Advanced DataTools Corporation Voice: 703-256-0267 # # Control you Informix database security with DB Privileges # #############################################################################