Users and Databases

HEAVY.AI has a default superuser named admin with default password HyperInteractive.
When you create or alter a user, you can grant superuser privileges by setting the is_super property.
You can also specify a default database when you create or alter a user by using the default_db property. During login, if a database is not specified, the server uses the default database assigned to that user. If no default database is assigned to the user and no database is specified during login, the heavyai database is used.
When an administrator, superuser, or owner drops or renames a database, all current active sessions for users logged in to that database are invalidated. The users must log in again.
Similarly, when an administrator or superuser drops or renames a user, all active sessions for that user are immediately invalidated.
If a password includes characters that are nonalphanumeric, it must be enclosed in single quotes when logging in to heavysql. For example:
$HEAVYAI_PATH/bin/heavysql heavyai -u admin -p '77Heavy!9Ai'
For more information about users, roles, and privileges, see DDL - Roles and Privileges.
Nomenclature Constraints
The following are naming convention requirements for HEAVY.AI objects, described in regex notation:
A NAME is [A-Za-z_][A-Za-z0-9\$_]*
A DASHEDNAME is [A-Za-z_][A-Za-z0-9\$_\-]*
An EMAIL is ([^[:space:]\"]+|\".+\")@[A-Za-z0-9][A-Za-z0-9\-\.]*\.[A-Za-z]+
User objects can use NAME, DASHEDNAME, or EMAIL format.
Role objects must use either NAME or DASHEDNAME format.
Database and column objects must use NAME format.
CREATE USER
1
CREATE USER ["]<name>["] (<property> = value,...);
Copied!
HEAVY.AI accepts (almost) any string enclosed in optional double quotation marks as the user name.
Property
Value
password
User's password.
is_super
Set to true if user is a superuser. Default is false.
default_db
User's default database on login.
can_login
Set to true (default/implicit) to activate a user.

When false, the user still retains all defined privileges and configuration settings, but cannot log in to HEAVY.AI. Deactivated users who try to log in receive the error message "Unauthorized Access: User is deactivated."
Examples:
1
CREATE USER jason (password = 'HeavyaiRocks!', is_super = 'true', default_db='tweets');
2
CREATE USER "pembroke.q.aloysius" (password= 'HeavyaiRolls!', default_db='heavyai');
Copied!
DROP USER
1
DROP USER [IF EXISTS] ["]<name>["];
Copied!
Example:
1
DROP USER [IF EXISTS] jason;
2
DROP USER "pemboke.q.aloysius";
Copied!
ALTER USER
1
ALTER USER ["]<name>["] (<property> = value, ...);
2
ALTER USER ["]<oldUserName>["] RENAME TO ["]<newUserName>["];
Copied!
HEAVY.AI accepts (almost) any string enclosed in optional double quotation marks as the old or new user name.
Property
Value
password
User's password.
is_super
Set to true if user is a superuser. Default is false.
default_db
User's default database on login.
can_login
Set to true (default/implicit) to activate a user.
When false, the user still retains all defined privileges and configuration settings, but cannot log in to HEAVY.AI. Deactivated users who try to log in receive the error message "Unauthorized Access: User is deactivated."
Example:
1
ALTER USER admin (password = 'HeavyaiIsFast!');
2
ALTER USER jason (is_super = 'false', password = 'SilkySmooth', default_db='traffic');
3
ALTER USER methuselah RENAME TO aurora;
4
ALTER USER "pembroke.q.aloysius" RENAME TO "pembroke.q.murgatroyd";
5
ALTER USER chumley (can_login='false');
Copied!
CREATE DATABASE
1
CREATE DATABASE [IF NOT EXISTS] <name> (<property> = value, ...);
Copied!
Database names cannot include quotes, spaces, or special characters.
Property
Value
owner
User name of the database owner.
Example:
1
CREATE DATABASE test (owner = 'jason');
Copied!
DROP DATABASE
1
DROP DATABASE [IF EXISTS] ;
Copied!
Example:
1
DROP DATABASE IF EXISTS test;
Copied!
ALTER DATABASE
1
ALTER DATABASE <name> RENAME TO <name>;
Copied!
To alter a database, you must be the owner of the database or an HeavyDB superuser.
Example:
1
ALTER DATABASE curmudgeonlyOldDatabase RENAME TO ingenuousNewDatabase;
Copied!
REASSIGN OWNED
1
REASSIGN OWNED BY <old_owner>, <old_owner>, ... TO <new_owner>
Copied!
Changes ownership of database objects (tables, views, dashboards, etc.) from a user or set of users in the current database to a different user.
Example: Reassign database objects owned by jason and mike to joe.
1
REASSIGN OWNED BY jason, mike TO joe;
Copied!
Database object ownership changes only for the currently connected database; objects in other databases are not affected. Ownership of the database itself is not affected. You must be a superuser to run this command.
Database Security Example
See Example: Data Security in DDL - Roles and Privileges for a database security example.

Datatypes

Tables

Last modified 1mo ago

Export as PDF

Copy link

Contents

Nomenclature Constraints

Database Security Example