AS DEFAULT Option - Advanced SQL Engine - Teradata Database

SQL Data Control Language

Product
Advanced SQL Engine
Teradata Database
Release Number
17.05
17.00
Published
June 2020
Language
English (United States)
Last Update
2021-01-24
dita:mapPath
lmb1556233084626.ditamap
dita:ditavalPath
lze1555437562152.ditaval
dita:id
B035-1149
lifecycle
previous
Product Category
Teradata® Vantage™ NewSQLEngine

A request that includes the AS DEFAULT option has no effect on the logon access granted to or revoked from specific user names.

The following rules apply to the AS DEFAULT option:

Statement Privileges Assumed
REVOKE LOGON The user cannot access the applicable client even if that client has an assigned default of GRANT.
GRANT LOGON The user can always access the applicable client even if that client has an assigned default of REVOKE.

Note in the following examples that these two requests do not have the same semantics:

REVOKE LOGON ON ALL AS DEFAULT;

REVOKE LOGON ON ALL FROM "DEFAULT";

The first request revokes logon privileges on any source through which a logon is attempted, including the Teradata Database console, without residual conditions. Note that the string AS DEFAULT in this request is a keyword phrase and does not identify a user.

In the second request, Teradata Database treats “DEFAULT” as a string literal that identifies a user, not as a keyword, and the request revokes logon privileges on all logon sources for the user named DEFAULT. Because DEFAULT is a dummy user name and cannot logon to Teradata Database, the second request, though syntactically valid, essentially has no effect.