Setting the SQL standard authorization mode

Use the derby.database.sqlAuthorization property to enable SQL standard authorization.

The derby.database.sqlAuthorization property controls the ability for object owners to grant and revoke permission for users to perform actions on database objects.

After you set the derby.database.sqlAuthorization property to TRUE, you cannot set the property back to FALSE.

You can set the derby.database.sqlAuthorization property as a system property or as a database property. If you set this property as a system property before you create the databases, all new databases will automatically have SQL authorization enabled. If the databases already exists, you can set this property only as a database property.

derby.database.sqlAuthorization=true

To enable SQL standard authorization for a specific database, set the derby.database.sqlAuthorization property as a database property:

CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
    'derby.database.sqlAuthorization',
    'true')

• Setting the default connection access mode
  Use the derby.database.defaultConnectionMode property to specify the default type of access that users have when they connect to the database.
• SQL standard authorization
  When the SQL standard authorization mode is enabled, object owners can use the GRANT and REVOKE SQL statements to set the user permissions for specific database objects or for specific SQL actions.
• User authorization exceptions
  SQL exceptions are returned when errors occur with user authorizations.