Dictionary Storage of CONNECT THROUGH Metadata - Analytics Database - Teradata Vantage

SQL Data Control Language

Deployment
VantageCloud
VantageCore
Edition
Enterprise
IntelliFlex
VMware
Product
Analytics Database
Teradata Vantage
Release Number
17.20
Published
June 2022
ft:locale
en-US
ft:lastEdition
2025-03-29
dita:mapPath
sgu1628111251052.ditamap
dita:ditavalPath
qkf1628213546010.ditaval
dita:id
dvv1472243528022
lifecycle
latest
Product Category
Teradata Vantageā„¢

The dictionary table DBC.ConnectRulesTbl contains information on which proxy users can connect through which trusted users and what roles are available to make proxy connections. The table contains one row for every trusted_user_name:proxy_user_name combination.

When processing a GRANT CONNECT THROUGH request, the system writes a row to DBC.ConnectRulesTbl for each of the following pairs:
  • trusted_user_name:permanent_user_name
  • trusted_user_name:application_user_name

The row persists until either you drop the trusted user or the permanent user.

When you grant WITH TRUST_ONLY to a trusted user, Vantage adds a row to DBC.ConnectRulesTbl that contains the following information:
  • TrustUserId
  • ProxyUser=space_characters
  • TrustOnly=Y

Vantage also updates all rows in DBC.ConnectRulesTbl with the value for TrustUserId=specified_TrustUserID to set TrustOnly=Y.

When you revoke WITH TRUST_ONLY from a trusted user, Vantage updates all rows in DBC.ConnectRulesTbl where TrustUserId=specified_TrustUserID to set TrustOnly=N.

To provide an audit trail for the management of the rules, Vantage retains the row if the privilege is revoked, but does not drop the user.

The following list indicates the values for DBC.ConnectRulesTbl.GrantStatus when the TRUST_ONLY privilege is granted to a trusted user or not:
  • If DBC.ConnectRulesTbl.GrantStatus is set to G, then the TRUST_ONLY privilege is granted to trusted_user.
  • If DBC.ConnectRulesTbl.GrantStatus is set to R, then TRUST_ONLY privilege is revoked from trusted_user.