16.10 - Other DBC Tables with Security Constraint Columns - Teradata Database

Teradata Database Security Administration

prodname
Teradata Database
vrm_release
16.10
created_date
June 2017
category
Administration
Security
featnum
B035-1100-161K
Table Description
DBC.TVFields Contains a row for every column in a database table, view, or index.

The ConstraintID column indicates whether a column is a security constraint.

DBC.TVM The MACFlag column contains a value of either:
  • 'Y' for RLS tables
  • 'N' or NULL for non-RLS tables
DBC.AccessRights Contains abbreviations that define user privileges in the database. The table includes the following abbreviations for row level security privileges:
  • SD - CONSTRAINT DEFINITION
  • SA - CONSTRAINT ASSIGNMENT
  • OI - OVERRIDE INSERT
  • OS - OVERRIDE SELECT
  • OU - OVERRIDE UPDATE
  • OD - OVERRIDE DELETE
  • OA - OVERRIDE DUMP
  • OR - OVERRIDE RESTORE
DBC.SessionTbl Provides information about a session based on the session ID. A session can be labeled with up to 6 non-set and 2 set constraints.

The SessionTbl identifies each active constraint for each session by:

  • Constraint ID: A four-byte internal identifier used by the system for recovery. You can determine the associated constraint name by joining with DBC.SecConstraints.
  • Constraint Value: Either a numeric value for hierarchical constraints, or a byte string for non-hierarchical constraints. You can determine the name that corresponds to a constraint value by joining with DBC.ConstraintValues.
DBC.AccLogRuleTbl Indicates whether a logging rule is for a security constraint related privilege, and contains a column for each row level security privilege.
DBC.AccLogTbl Indicates whether a column level access rule applies to a security constraint column.