| Goal | Privileges User Needs |
|---|---|
| Create, alter, or drop CONSTRAINT objects | CONSTRAINT DEFINITION privilege (system level). |
|
CONSTRAINT ASSIGNMENT privilege (system level). For managing security constraints for users, tables, views and indexes the user must also have the necessary CREATE/REPLACE/ MODIFY privileges on the object. |
| Run SHOW CONSTRAINT statement | CONSTRAINT DEFINITION or CONSTRAINT ASSIGNMENT privilege. |
| Bypass enforcement of security constraint UDFs | OVERRIDE INSERT, OVERRIDE SELECT, OVERRIDE UPDATE, OVERRIDE DELETE for the security constraint, on the object being accessed. |