Dropping security objects

Use the DROP SECURITY statement to remove a security label component, a security policy, or a security label from the database.

Before you begin

You must hold the DBSECADM role to remove a security object.

About this task

Three valid keyword definitions of the DROP SECURITY statement are as follows:

Procedure

  1. DROP SECURITY POLICY policy removes a security policy; this can be used in RESTRICT and CASCADE modes
    • Example: DROP SECURITY POLICY company removes the policy named company from the database
  2. DROP SECURITY LABEL policy.label removes a security label; this can be used in RESTRICT mode
    • Example: DROP SECURITY LABEL company.label2 removes the label named label2.
  3. DROP SECURITY LABEL COMPONENT component removes a security label component; this can be use in RESTRICT mode
    • Example: DROP SECURITY LABEL COMPONENT department removes the component department.
    For more information about the DROP SECURITY statement, including details about the RESTRICT and CASCADE modes, see HCL OneDB™ Guide to SQL: Syntax.

Results

When the DROP SECURITY statement executes successfully, the database server deletes any rows that reference the name or the numeric identifier of the specified object from the tables of the system catalog, including the following tables:

What to do next

  • sysecpolicies for security policies
  • sysseclabels for security labels
  • sysseclabelcomponents for security label components