How to create a report for GRANT/REVOKE DCL statements with Log Analyzer?.

Products

• 24X7 High-Availability Manager for DB2 for z/OS
• Batch Processor
• Compile QQF
• Data Compressor for DB2 for z/OS
• CA Unicenter NSM
• RC/Update for DB2 for z/OS
• DB2 TOOLS- DATABASE MISC

Issue/Introduction

Log Analyzer does not have an option to create a report with only GRANT/REVOKE DCL statements, the DDL report will include these statements with all the other statements. It is difficult to review the GRANT/REVOKE statements in the middle of the other DDL statements.

Environment

Release:
Component: PLA

Resolution

You can create the report with two steps:

1. Run DML report for the log range you are interested in, turn on reporting for DB2 Catalog tables and include only the tables listed below:

SYSIBM.SYSVARIABLEAUTH
SYSIBM.SYSUSERAUTH
SYSIBM.SYSTABAUTH
SYSIBM.SYSSEQUENCEAUTH
SYSIBM.SYSSCHEMAAUTH
SYSIBM.SYSROUTINEAUTH
SYSIBM.SYSRESAUTH
SYSIBM.SYSPLANAUTH
SYSIBM.SYSPACKAUTH
SYSIBM.SYSDBAUTH
SYSIBM.SYSCOLAUTH

Also make sure to specify valid data set names for Extract and Control files on output specification screen.
 
2. Run DDL report (Or generate REDO DDL) with GRANT and REVOKE statements included, but use the previously generated Extract and Control files as the source for the report. That way you will filter out all DDL statements you are not interested in and only GRANT/REVOKE DCL statements will remain in the output.