# Setting the default connection access mode

You can use the `derby.database.defaultConnectionMode` property to specify the default type of access that users have when they connect to the database.

The valid settings for the `derby.database.defaultConnectionMode` property are:

- `noAccess`
- `readOnlyAccess`
- `fullAccess`

If you do not specify a setting for the `derby.database.defaultConnectionMode` property, the default access setting is `fullAccess`.

To set the default connection access mode, specify the access in a CALL statement. For example:

To specify read-write access for the System Administrator user ID `sa` and read-only access as the default for anyone else who connects to the database, issue these CALL statements:

    CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
        'derby.database.fullAccessUsers', 'sa')

    CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
        'derby.database.defaultConnectionMode',
        'readOnlyAccess')

To specify read-write access for the user ID Fred and no access for other users, issue these CALL statements:

    CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
        'derby.database.fullAccessUsers', 'Fred')

    CALL SYSCS_UTIL.SYSCS_SET_DATABASE_PROPERTY(
        'derby.database.defaultConnectionMode',
        'noAccess')

Parent topic: Configuring coarse-grained user authorization
Related reference
Read-only and full access permissions
User authorization exceptions