# Read-only and full access permissions

The actions that users can perform on a Derby database with coarse-grained authorization are determined by the type of access that users have to the database objects.

The following table lists the actions that users can perform based on the type of access that a user is granted on a database.

Table 1. Actions that are authorized by type of access
Action | Read-only access | Full access
--- | --- | ---
Executing SELECT statements | Yes | Yes
Reading database properties | Yes | Yes
Loading database classes from jar files | Yes | Yes
Executing INSERT, UPDATE, or DELETE statements | No | Yes
Executing DDL statements | No | Yes
Adding or replacing jar files | No | Yes
Setting database properties | No | Yes

Parent topic: Configuring coarse-grained user authorization
Related concepts
Setting the default connection access mode
Related reference
User authorization exceptions