16.10 - Default PUBLIC Privileges - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K

By default, the system grants several default privileges to PUBLIC on specific Data Dictionary objects, and all valid Teradata Database users automatically have PUBLIC privileges. You can grant and revoke PUBLIC privileges according to your site security policy, but you should keep a list of the default privileges so you can re-grant them to PUBLIC if necessary.

Until you make changes, you can query the system to view the default PUBLIC privileges:

SELECT DatabaseName, TableName, AccessRight FROM DBC.AllRights WHERE UserName='PUBLIC' ORDER BY 2, 1;

See Knowledge Article SD1000E41D2 for a full list of default PUBLIC privileges.

Knowledge articles are available in Teradata @ Your Service: https://access.teradata.com

Default PUBLIC Privileges Required by Client Applications

The following privilege… Granted to PUBLIC on… Affects the following tools and utilities…
SELECT DBC.Databases NetBackup™ Teradata Extension
SELECT DBC.DBCInfo Archive/Recovery Utility (Teradata ARC), Teradata System Emulation Tool (Teradata SET)
SELECT DBC.TDStats Teradata Viewpoint Stats Manager. See Teradata Viewpoint Configuration Guide.
SELECT DBC.Tables NetBackup™ Teradata Extension, Teradata SET
INSERT, SELECT, DELETE, UPDATE SysAdmin.FastLog a FastExport, FastLoad, MultiLoad
EXECUTE SysAdmin.FastLogIns a FastExport, FastLoad, MultiLoad
SELECT SysAdmin.FastLogRestartV a FastExport, FastLoad, MultiLoad
EXECUTE SysAdmin.FastLogUpd a FastExport, FastLoad, MultiLoad
SELECT SysAdmin.FastLogV a FastExport, FastLoad, MultiLoad
a Denotes an internal table containing FastLoad information.