Create a row-secure table with permissions
For this example, create a row-secure table (projstatus)
and grant privileges for the users.
MLSSAMPLE.SCH(DBA)=> CREATE TABLE projstatus(id int, name varchar(80),
metric int) ROW SECURITY;
CREATE TABLE
MLSSAMPLE.SCH(DBA)=> GRANT SELECT, INSERT, UPDATE, DELETE ON projstatus to
sw1;
GRANT
MLSSAMPLE.SCH(DBA)=> GRANT SELECT, INSERT, UPDATE, DELETE, LABEL ACCESS on
projstatus to sw2;
GRANT
MLSSAMPLE.SCH(DBA)=> GRANT SELECT, INSERT, UPDATE, DELETE, LABEL ACCESS,
LABEL EXPAND on projstatus to engmgr;
GRANT
The following are the privileges of each user:
- User sw1 can operate on projstatus, but cannot see the labels.
- User sw2 can operate on projstatus, can see the labels, but cannot change them.
- User engmgr can operate on projstatus, can see the labels, and can declassify data.