User privileges for geodatabases in Informix

This topic describes the required database privileges for common types of users: data viewers, data editors, data creators, and the geodatabase administrator.

If your users do more than view and issue simple SELECT statements, they need RESOURCE privileges in the Informix database. Resource-level privileges allow the user to do the following:

You can use the SQL GRANT statement to grant the RESOURCE privilege to the geodatabase administrator and other users as appropriate.

GRANT RESOURCE TO <user_name>

Type of user

Database privileges

Dataset privileges

Notes

Data viewer

CONNECT

If your database is configured to use shared ArcSDE log files (the default), additional privileges may be needed. See Log file table configuration options for Informix for more information.

Data editor

RESOURCE

SELECT, INSERT, UPDATE, and DELETE on other users' datasets

If the user will be editing versioned data through a versioned view, the user must also be granted SELECT, INSERT, UPDATE, and DELETE privileges on the versioned view. When you use the Privileges dialog box in ArcGIS to grant the SELECT, INSERT, UPDATE, and DELETE privileges on a versioned feature class, those privileges are automatically granted on the associated versioned view.

Data creator

RESOURCE

Geodatabase administrator

RESOURCE

CONNECT on the sysadmin database

To create a geodatabase in an existing database, the geodatabase administrator user (sde) must be granted the EXTEND role and RESOURCE privilege for that database.

To upgrade an existing geodatabase, the geodatabase administrator user (sde) must be granted DBA privilege for that database.

To drop connections to the geodatabase, the geodatabase administrator user (sde) user must have CONNECT privilege for the sysadmin database.

Database privileges should be granted and revoked by connecting to the Informix geodatabase as a user with the DBA privilege and then executing SQL GRANT and REVOKE statements directly.

Dataset privileges should be granted or revoked by the dataset owner using the Privileges dialog box or Change Privileges geoprocessing tool, which is available in ArcGIS for Desktop. See Granting and revoking privileges on datasets and Change Privileges for instructions.

Related Topics

8/25/2014