Db2 Basics: Investigating Permissions in an Existing Database

You may also like...

2 Responses

  1. Wayne Z says:

    In old bad way:), what about use ‘db2look -x’ to get started

    • Ember Crooks says:

      That would work for object-level permissions, but would not get you system or database level authorities. As a scripter, I also mostly dislike methods that simply put data out to a flat file where I cannot change how I return or filter on what I retrieve. The db2look method places each permission on a separate line, so if an ID has 4 permissions on 1500 tables, it gets long, fast. The advantage of using db2look is that you immediately have the commands to grant permissions, which are easy to transform into statements to revoke permissions. You would actually have to use `-xd` to get all permissions, as some obvious permissions are not included with the `-x` option.

Leave a Reply

Your email address will not be published. Required fields are marked *