Setting the default connection access mode

You can use the derby.database.defaultConnectionMode property to specify the default type of access that users have when they connect to the database.

The valid settings for the derby.database.defaultConnectionMode property are:

If you do not specify a setting for the derby.database.defaultConnectionMode property, the default access setting is fullAccess.

To set the default connection access mode, specify the access in a CALL statement. For example:

To specify read-write access for the System Administrator user ID sa and read-only access as the default for anyone else who connects to the database, issue these CALL statements:
CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.fullAccessUsers', 'sa')

CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.defaultConnectionMode',
    'readOnlyAccess')

To specify read-write access for the user ID Fred and no access for other users, issue these CALL statements:

CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.fullAccessUsers', 'Fred')

CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.defaultConnectionMode',
    'noAccess')
Related reference
Read-only and full access permissions
User authorization exceptions