User Permission Planning Process

Prerequisites

Before planning users and permissions, you have understood the basic concepts of MOTService users and roles by referring to Users and Roles.

Planning Process

The general process of planning users and permissions is as follows:

1. Plan system permissions.

   By default, only system administrators have system permissions. After a database is installed, you can grant system permissions to other users as a system administrator.

   For security purposes, system permissions must only be granted to reliable users.

2. Plan object permissions.

   The planning of object permissions is flexible. System administrators can either grant all permissions or partial permissions (such as SELECT and UPDATE) of certain database objects to users.

3. Plan roles.

   In practice, if more than two users have the same object permissions, you are advised to plan a role for these users and grant the object permissions to the role.

4. Grant permissions to users.
   • Execute the CREATE USER or ALTER USER statement to grant system permissions to a specific user.
   • Execute the GRANT or REVOKE statement to grant or revoke object permissions to or from a specific user.