Permission Policy

The Permission Policy node is part of Query Execution Policy in Bold Reports^®. It governs which queries can be executed using a precise system of permission types, specific command allow/deny rules, and overrides.

Permission Types

ReadOnly

This type allows only data reading operations. All data modification and schema/privilege commands are blocked by default.

Allowed keywords: SELECT, WITH, EXEC, EXECUTE, CALL, BEGIN, END, DECLARE.

Restricted keywords: INSERT, UPDATE, DELETE, MERGE, REPLACE, UPSERT, COPY, LOAD, LOCK, CREATE, ALTER, DROP, TRUNCATE, GRANT, REVOKE, RENAME, COMMENT, ANALYZE, VACUUM.

ReadWrite

Suitable for scenarios that need to perform data modification operations, while schema and security-related changes remain blocked.

Allowed keywords: SELECT, WITH, EXEC, EXECUTE, CALL, BEGIN, END, DECLARE, INSERT, UPDATE, DELETE, MERGE, REPLACE, UPSERT, COPY, LOAD, LOCK.

Restricted keywords: CREATE, ALTER, DROP, TRUNCATE, GRANT, REVOKE, RENAME, COMMENT, ANALYZE, VACUUM.

Unrestricted

• Allowed commands: All supported commands except those blocked by Security Policy or Restricted Commands/Keywords.
• Description: No built-in restrictions; only Security Policy and overrides apply.

Permission Overrides

• Restricted Commands: You can block specific commands beyond the standard Permission Type.
• Restricted Keywords: Block specific keywords in addition to basic restrictions, to further tighten security.
• Allowed Commands: Explicitly allow additional commands; however, Allowed Commands will never override commands blocked by Security Policy.