# SYSCOLPERMS system table

The SYSCOLPERMS table stores the column permissions that have been granted but not revoked.

All of the permissions for one (GRANTEE, TABLEID, TYPE, GRANTOR) combination are specified in a single row in the SYSCOLPERMS table. The keys for the SYSCOLPERMS table are:

- Primary key (GRANTEE, TABLEID, TYPE, GRANTOR)
- Unique key (COLPERMSID)
- Foreign key (TABLEID references SYS.SYSTABLES)

Column Name | Type | Length | Nullability | Contents
--- | --- | --- | --- | ---
COLPERMSID | CHAR | 36 | False | Used by the dependency manager to track the dependency of a view, trigger, or constraint on the column level permissions.
GRANTEE | VARCHAR | 128 | False | The authorization ID of the user or role to which the privilege was granted.
GRANTOR | VARCHAR | 128 | False | The authorization ID of the user who granted the privilege. Privileges can be granted only by the object owner.
TABLEID | CHAR | 36 | False | The unique identifier for the table on which the permissions have been granted.
TYPE | CHAR | 1 | False | If the privilege is non-grantable, the valid values are: 's' for SELECT 'u' for UPDATE 'r' for REFERENCES If the privilege is grantable, the valid values are: 'S' for SELECT 'U' for UPDATE 'R' for REFERENCES
COLUMNS | org.apache.derby.iapi.services.io.FormatableBitSet |  | False | A list of columns to which the privilege applies. This class is not part of the public API.

Parent topic: Derby system tables
Related reference
REVOKE statement
GRANT statement