User Access Considerations when Working with SQL

As with other features and functionality in Geo SCADA Expert, in order to successfully query the database using SQL, your User Account has to provide the relevant access to the database items and fields that are being queried.

The permissions that are required for reading or writing to a database field vary, depending on the specific field. Typically, to write to a field, the User Account has to be assigned the Configure permission if the field is a configuration field, or the Control permission if the field is a data field. To read a field, the User Account typically has to be assigned the Read permission. To read some 'sensitive' fields (such as IP addresses, and port numbers), the User Account requires a different (higher) permission, such as the Configure permission. For further information, see Configuration Fields and Data Fields Section in the Geo SCADA Expert Guide to the Database.

Some types of database item are special cases:

• To modify, configure, insert, or delete any security-related database items (such as User Accounts, User Groups, User Rosters, or Password Blocklists, and so on), the User Account has to be assigned the Security permission on those database items. This is in addition to having other relevant permissions. For further information, see Configuration Fields and Data Fields Section in the Geo SCADA Expert Guide to the Database.

• To modify content in the In-Database Translation Dictionary, the User Account has to be assigned the Configure permission on the Root Group. This also applies to users that access the dictionary database table DBDictionary directly (for example, by using QueryPad).

• To modify content in Data Grids or Data Tables, the User Account has to be assigned the Configure permission on the Data Grid or Data Table that is being modified.

Further information is provided in some of the topics that relate to specific commands in this guide.