Granting permissions on views

Granting users the right to grant permissions

ASA Database Administration Guide
Managing User IDs and Permissions
Managing individual user IDs and permissions

Granting permissions on views

Setting permissions on views is similar to setting them on tables; for more information about the SQL statements involved, see Granting permissions on tables.

A user may perform an operation through a view if one or more of the following are true:

The appropriate permission(s) on the view for the operation has been granted to the user by a DBA.
The user has the appropriate permission(s) on all the base table(s) for the operation.
The user was granted appropriate permission(s) for the operation on the view by a non-DBA user. This user must be either the owner of the view or have WITH GRANT OPTION of the appropriate permission(s) on the view. The owner of the view must be either:
- a DBA.
- a non-DBA, but also the owner of all the base table(s) referred to by the view.
- a non-DBA, and not the owner of some or all of the base table(s) referred to by the view. However, the view owner has SELECT permission WITH GRANT OPTION on the base table(s) not owned and any other required permission(s) WITH GRANT OPTION on the base table(s) not owned for the operation.
  
  Instead of the owner having permission(s) WITH GRANT OPTION on the base table(s), permission(s) may have been granted to PUBLIC. This includes SELECT permission on system tables.

UPDATE permissions can be granted only on an entire view. Unlike tables, UPDATE permissions cannot be granted on individual columns within a view.

To grant permissions on views (Sybase Central)

Connect to the database.
Open the Views folder for that database.
Right-click a view and choose Properties from the popup menu.
On the Permissions tab of the View property sheet, configure the permissions for the view:
- Click Grant to select users or groups to which to grant full permissions.
- Click in the fields beside the user or group to set specific permissions. Permissions are indicated by a check mark, and grant options are indicated by a check mark with two '+' signs.
- Select a user or group in the list and click Revoke to revoke all permissions.

Tip

You can also assign permissions from the User or Group property sheet. To assign permissions to many users and groups at once, use the view's property sheet. To assign permissions to many views at once, use the User's or Group's property sheet.

Behavior change

There was a behavior change with Version 5 of the software concerning the permission requirements. Previously, permissions on the underlying tables were required to grant permissions on views.