| To... | the user must have the... |
|---|---|
| create, alter, or drop CONSTRAINT objects | CONSTRAINT DEFINITION privilege (system level). |
|
CONSTRAINT ASSIGNMENT privilege (system level). For managing security constraints for users, tables, views and indexes the user must also have the necessary CREATE/REPLACE/ MODIFY privileges on the object. |
| execute the SHOW CONSTRAINT statement | CONSTRAINT DEFINITION or CONSTRAINT ASSIGNMENT privilege. |
| bypass enforcement of security constraint UDFs | OVERRIDE INSERT, OVERRIDE SELECT, OVERRIDE UPDATE, OVERRIDE DELETE for the security constraint, on the object being accessed. |