# SYSCS_UTIL.SYSCS_GET_USER_ACCESS system function

The `SYSCS_UTIL.SYSCS_GET_USER_ACCESS` function returns the current connection access permission for the user specified.

If no permission is explicitly set for the user, the access permission for the user is the value of the default connection mode. The default connection mode is set by using the `derby.database.defaultConnectionMode` property.

## Syntax

    SYSCS_UTIL.SYSCS_GET_USER_ACCESS (USERNAME VARCHAR(128)) RETURNS VARCHAR(128)

USERNAME
  An input argument of type VARCHAR(128) that specifies the user ID in the Derby database.

The value that is returned by this function is either `fullAccess`, `readOnlyAccess`, or `noAccess`.

A return value of `noAccess` means that the connection attempt by the user will be denied because neither the `derby.database.fullAccessUsers` property nor the `derby.database.readOnlyAccessUsers` property is set for the user, and the `derby.database.defaultConnectionMode` property is set to `noAccess`.

The names of the connection permissions match the existing names in use by Derby.

## Execute privileges

If authentication and SQL authorization are both enabled, only the database owner has execute privileges on this function by default. See "Enabling user authentication" and "Setting the SQL standard authorization mode" in the Derby Developer's Guide for more information. The database owner can grant access to other users.

## Example

    VALUES SYSCS_UTIL.SYSCS_GET_USER_ACCESS ('BRUNNER')

Parent topic: Built-in system functions
Related reference
SYSCS_UTIL.SYSCS_SET_USER_ACCESS system procedure