Authorities required for file operations

 

This topic lists the file object authority and data authority required for file functions.

Table 1 lists the file object authority required for file functions. Table 2 lists the data authority required for file functions. This is the same information that was presented in the previous two sections, but it is listed by function rather than by authority.

Table 1. Object authority required for file operations. The file object authority required for file functions
  Function Object operational Object existence Object management Object reference Object alter
Open, I/O, close file1 X        
Compile a program using the file description X        
Display file description X        
Delete file X X      
Save/restore   X      
Transfer ownership X X      
Grant/revoke authority X   X    
Change file description X   X    
Move file X   X    
Rename file X   X    
Replace file X X X    
Refer to another file 2     X X  
Add or remove file constraints 3     X   X
Add or remove triggers 4     X   X
Change attributes 5     X   X
Notes:

1

For device files that are not using spooling, also have object operational and all data authorities to the device.

2

For database files only.

3

For database files only. Parent files need object management or object reference authority. Dependent files need object management or object alter authority.

4

For database files only. Files need object management or object alter authority.

5

For database files and SQL packages only. Files need object management or object alter authority.

Table 2. Data authority required for file operations. The data authority required for file functions.
  Function   Execute   Read   Add   Update   Delete
Open, I/O, close file1   X X2 X3 X3
Compile a program using the file description   X      
Run a program or locate an object in a library X        
Display file description   X      
Replace file   X      
Add or remove triggers 4   X X5 X6 X7
Notes:

1

For device files that are not using spooling, also have object operational and all data authorities to the device.

2

Open for output for database and save files.

3

Open for update or delete for database files.

4

For database files only.

5

Add authority required in addition to Read authority for inserting triggers.

6

Update authority required in addition to Read authority for updating triggers.

7

Delete authority required in addition to Read authority for deleting triggers.

 

Parent topic:

Security