Home
SecurityYou can secure your HCL OneDB™ database server and the data that is stored in your HCL OneDB™ databases. You can encrypt data, secure connections, control user privileges and access, and audit data security.
Security in HCL OneDB™The HCL OneDB™ Security Guide documents methods for keeping your data secure by preventing unauthorized viewing and altering of data or database objects, including how to use the secure-auditing facility of the database server.
Securing data
Label-Based Access ControlYou can use label-based access control (LBAC), an implementation of multi-level security (MLS), to control who has read access and who has write access to individual rows and columns of data.
DBSECADM role in LBACThe database security administrator role (DBSECADM) is required to create and maintain label-based access control security objects.
Revoking the DBSECADM RoleA DBSA uses the REVOKE DBSECADM statement to take away database security administrator authority from a user who previously was granted this role.

Revoking the database security administrator role

A DBSA uses the REVOKE DBSECADM statement to take away database security administrator authority from a user who previously was granted this role.

Before you begin

You must be a DBSA to revoke the DBSECADM role. You must know the login name from whom you want to revoke the DBSECADM role.

Use the REVOKE DBSECADM statement to revoke the DBSECADM role, as described in HCL OneDB™ Guide to SQL: Syntax.

The following statement revokes DBSECADM authority from user sam:

REVOKE DBSECADM FROM sam;