Abbreviations for ACLs
The following table is a reference for the ACL abbreviations that are used in
sys.database and the output of the ybsql \ddp
command. Some abbreviations are used to identify multiple ACLs on different objects.
| Abbreviation | ON SYSTEM | ON DATABASE | SCHEMAS | TABLES/VIEWS | COLUMNS | SEQUENCES | STORED PROCEDURES | ROLES | KEYS | TRIGGERS |
|---|---|---|---|---|---|---|---|---|---|---|
| a (append) | BULK LOAD | INSERT | INSERT | |||||||
| r (read) | VIEW ROLE | SELECT | SELECT | SELECT | ||||||
| w (write) | ALTER ANY DATABASE | ALTER ANY SCHEMA | UPDATE | UPDATE | UPDATE | |||||
| d | DROP ANY DATABASE | DROP ANY SCHEMA | DELETE (tables) | |||||||
| D | TRUNCATE (tables) | |||||||||
| x | REFERENCES (create a foreign-key constraint) | REFERENCES | ||||||||
| t | For internal use only; triggers are not supported. | |||||||||
| X | CONTROL LDAP | EXECUTE | ||||||||
| U | CONTROL ANY SESSION | USAGE | USAGE | |||||||
| C | CREATE ROLE | CREATE | CREATE | |||||||
| T | CREATE TEMPORARY | |||||||||
| c | CONNECT | |||||||||
| e | ENCRYPT | |||||||||
| E | DECRYPT | |||||||||
| h | HMAC (privilege to run the HMAC_KS function with a
key as input to the function) |
|||||||||
| b | CREATE DATABASE | |||||||||
| p | EXPLAIN QUERY | EXPLAIN QUERY | ||||||||
| q | VIEW QUERY TEXT | VIEW QUERY TEXT | ||||||||
| Q | TRACE QUERY | TRACE QUERY | ||||||||
| A | ALTER ANY ROLE | ALTER ROLE | ||||||||
| B | DROP ANY ROLE | DROP ROLE | ||||||||
| u | BACKUP ANY DATABASE | BACKUP | ||||||||
| O | RESTORE ANY DATABASE | RESTORE | ||||||||
| Z | CONTROL | CONTROL |