Database privileges

Authorization IDs with DBADM privileges can grant and revoke specific privileges within a particular database.

Syntax:
Read syntax diagramSkip visual syntax diagram GRANTREVOKE DBADMON DATABASE,database-nameTOFROM,authorization-namePUBLICWITH GRANT OPTION1
Notes:
  • 1 GRANT only

The following table describes the statement parameters.

Table 1. Parameter descriptions for the GRANT and REVOKE statement.
Parameter Description
GRANT ON DATABASE database-name Identifies database types on which privileges are to be granted. For each named database type the grantor must have all the specified privileges with the GRANT option. This privilege secures the mappings of tables and dropping of mapped tables. The types are as follows:
$ADABAS
For Adabas mappings
$CFI
For metadata catalog mappings
$DATACOM
For CA-Datacom mappings
$IDMS
For CA-IDMS mappings
$IMS
For IMS mappings
$SEQUENT
For sequential
$SP
for stored procedures
$VSAM
For VSAM
REVOKE ON DATABASE database-name Identifies the database type on which you revoke the privileges. For each database type, you or the indicated grantors must have granted at least one of the specified privileges on that database to all identified users (including PUBLIC, if specified). The same database type must not be identified more than once. The database-names are the same as those listed for the GRANT ON DATABASE database-name option.
{TO | FROM} {authorization-name | PUBLIC} Specifies to what authorization IDs the privileges are granted or revoked. The authorization-name variable lists one or more authorization IDs.
WITH GRANT OPTION Allows the named users to grant the database privileges to others. The user can specifically grant any privilege belonging to that authority. If you omit WITH GRANT OPTION, the named users cannot grant the privileges to others unless they have that authority from some other source.