Setting the default connection access mode

You can use the derby.database.defaultConnectionMode property to specify the default type of access that users have when they connect to the database.

If you use SQL authorization (the default with NATIVE authentication), you typically do not use this property.

The valid settings for the derby.database.defaultConnectionMode property are:

If you do not specify a setting for the derby.database.defaultConnectionMode property, the default access setting is fullAccess.

To set the default connection access mode, specify the access in a CALL statement. For example:

To specify read-write access for the system administrator userID sa and the read-only as the default access for anyone else who connects to the database, issue these CALL statements:
CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.fullAccessUsers', 'sa')

CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.defaultConnectionMode',
    'readOnlyAccess')

To specify read-write access for the user ID Fred and no access for other users, issue these CALL statements:

CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.fullAccessUsers', 'Fred')

CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.defaultConnectionMode',
    'noAccess')
Related concepts
Setting the SQL standard authorization mode
Setting access for individual users