Summary of Permissions for Users and Roles

This topic summarizes which permissions are available to and can be granted or revoked by the Splice user, regular users, and roles, in these sections:

Summary of Permissions in System Schemas

The following table summarizes which permissions apply to and can be granted or revoked by the Splice user, regular users, and roles for tables in the system schemas:

Operation Splice User Regular User Role
Has Permission? Can Grant or Revoke? Has Permission? Can Grant or Revoke? Has Permission? Can Grant or Revoke?
Update/Delete/Insert No No No No Same as Regular User
Select Yes No Yes, except for sys.sysusers No Same as Regular User
Create/Drop/Alter table ... No No No No Same as Regular User
Create/Drop schema No No No No Same as Regular User

These are the system schemas to which the above privileges apply:

  • sys
  • sysibm
  • syscs_util
  • syscs_diag
  • syscat
  • sysfun
  • sysproc
  • sysstat
  • nullid
  • sqlj

Permissions in the SPLICE Schema

The following table summarizes which permissions apply to and can be granted or revoked by the Splice user, regular users, and roles for tables in the SPLICE schema:

Operation Splice User Regular User Role
Has Permission? Can Grant or Revoke? Has Permission? Can Grant or Revoke? Has Permission? Can Grant or Revoke?
Update/Delete/Insert Yes No Yes, if granted the corresponding privilege. Same as regular user
Select Yes No Yes, if granted the corresponding privilege. Same as regular user
Create/Drop/Alter table ... Yes No Yes, if granted the corresponding privilege. Same as regular user
Create/Drop schema Yes No Yes for DROP SCHEMA, if the user becomes the owner of the SPLICE schema. No No

Permissions in Regular Schemas

The following table summarizes which permissions apply to and can be granted or revoked by the Splice user, regular users, and roles for tables in regular schemas:

Operation Splice User Regular User Role
Has Permission? Can Grant or Revoke? Has Permission? Can Grant or Revoke? Has Permission? Can Grant or Revoke?
Update/Delete/Insert Yes No Yes, if schema owner, or if granted the corresponding privilege. Yes, if granted the corresponding privilege
Select Yes No Yes, if schema owner, or if granted the corresponding privilege. Yes, if granted the corresponding privilege
Create/Drop/Alter table ... Yes No Yes, if schema owner, or if granted the corresponding privilege. Yes, if granted the corresponding privilege
Create/Drop schema Yes No

Yes for CREATE SCHEMA, if the schema name is the same as the user and does not yet exist.

Yes for DROP SCHEMA, if user is the schema owner.

No No

Permissions for System Procedures and Routines

The following table summarizes which permissions apply to and can be granted or revoked by the Splice user, regular users, and roles for system procedures and routines:

Object Splice User Regular User Role
Has Permission? Can Grant or Revoke? Has Permission? Can Grant or Revoke? Has Permission? Can Grant or Revoke?
System Procedures/Routines Yes No Yes for system schemas other than SYSCS_UTIL and SQLJ, which require that execution privilege be explicitly granted. Yes for the SYSCS_UTIL and SQLJ schemas; No for other system schemas. Same as regular user