Object authority

The following topics describe the types of authority that can be granted to a user for a file. Also, you can use the SQL GRANT and REVOKE statements to assign and remove these AS/400 authorities to SQL tables, including individual columns within those tables. You can find information about these statements in the SQL Reference book.

Object operational authority

Allows you to look at an object description and use the object as determined by your data authorities to the object. Object operational authority is required to:

• Open the file for processing. You must also have read authority to the file. For device files that are not using spooling, you must have object operational and also all data authorities to the device.
• Compile a program which uses the file description.
• Display the file description.
• Delete the file.
• Transfer ownership of the file.
• Grant and revoke authority.
• Change the file description.
• Move or rename the file.

Object existence authority

Object existence authority is required to:

• Delete the file.
• Save, restore, and free the storage of the file.
• Transfer ownership of the file.

Object management authority

Object management authority is required to:

• Grant and revoke authority. You can grant and revoke only the authority that you already have.
• Change the file description.
• Move or rename the file.
• Refer to a database file from another database file.
• Add triggers to and remove triggers from database files.
• Add referential and unique constraints to database files.
• Remove referential and unique constraints to database files.
• Change the attributes of a database file.
• Change the attributes of a SQL package.

Object reference authority

Allows you to refer to a database file from another database file. The operations that you can perform on the referred-to database file are determined by the referring database file.

Object alter authority

Allows you to alter the attributes of a database file or SQL package. Object alter authority is required to:

• Add triggers to and remove triggers from database files.
• Add referential and unique constraints to database files.
• Remove referential and unique constraints to database files.
• Change the attributes of a database file.
• Change the attributes of a SQL package.