Archives of the TeradataForum

Message Posted: Wed, 20 Jun 2007 @ 23:03:38 GMT

	<Prev	Next>		<<First	<Prev	Next>	Last>>

<-- Anonymously Posted: Wednesday, January 21, 2004 07:04 -->

Logon rules are not as "clean" as they probably should be...

You are correct that logon rules don't apply to DBC.

There is a system-wide ON ALL AS DEFAULT rule, and you can define more specific rules: for all users ON a specific host AS DEFAULT, TO a particular user ON ALL hosts, or TO user ON host. The most specific rule that matches the logon request is the one that applies.

Once you create a rule you can't ever get rid of it. You can only change its status between "Revoked", "Granted", or "Granted WITH NULL PASSWORD".

So in general the process is to see what rules exist, REVOKE the default rule and any others you don't want to have access this time, and GRANT rules for any new exceptions.

Note also that revoking LOGON doesn't affect any sessions already logged on, so you may need to abort sessions.

	<Prev	Next>		<<First	<Prev	Next>	Last>>