How to Use Grant and Revoke in Conjunction with ARCHIBUS (Sybase)

Your site may be using SQL database security. In this configuration the ARCHIBUS Roles table specifies what SQL username and password the ARCHIBUS application should use to sign in and query data on behalf of all users within that role. You do so by entering the SQL Login Username and Password within each ARCHIBUS Roles record.

When creating new database users accounts in the database, make each user a member of the AFM_USER_GROUP database group. The SQL statements to do this are:

GRANT CONNECT TO NewUserForRole IDENTIFIED BY newpswd;
GRANT MEMBERSHIP IN GROUP AFM_USER_GROUP TO NewUserForRole ;

If you wish to restrict access, use the database server program’s GRANT and REVOKE commands to establish the exact tables each user can access. For instance, for a group working on space management, you might give read access to all files, but give write access only to the files that affect space management.