Question

You have a table TSY.TABLE_RTF(rtf_id, rtf_category, rtf_descr, rtf_price) You do not want members of role CLERK see or modify the price. They also should not be able modify ID and Category. Their job is to search table by id or category and read/update the description. Provide trigger code to implement this scenario.

Answer 1

To implement the above scenario: Users have to create a role and then GRANT permission on that role.

CREATE ROLE clerk;

GRANT SELECT (rtf_id, rtf_category, rtf_descr), UPDATE (rtf_descr) on TSY.TABLE_RTF to CLERK

In the above command select(view) permission is granted on 3 columns only except rtf_price. Also, update permission is granted on rtf_descr column.

Like above you can also grant or deny INSERT and DELETE permission on a particular table