How to create a report for GRANT/REVOKE DCL statements with Log Analyzer?

Products

• Log Analyzer for DB2 for z/OS

Issue/Introduction

Log Analyzer for Db2 for z/OS (PLA) does not have an option to create a report with only GRANT/REVOKE DCL statements.
The DDL report will include these statements with all the other statements. It is difficult to review the GRANT/REVOKE
statements in the middle of the other DDL statements.

Resolution

You can create the report with two steps:

1. Run DML report for the log range you are interested in, turn on reporting for Db2 Catalog tables and include only the tables listed below:

SYSIBM.SYSVARIABLEAUTH
SYSIBM.SYSUSERAUTH
SYSIBM.SYSTABAUTH
SYSIBM.SYSSEQUENCEAUTH
SYSIBM.SYSSCHEMAAUTH
SYSIBM.SYSROUTINEAUTH
SYSIBM.SYSRESAUTH
SYSIBM.SYSPLANAUTH
SYSIBM.SYSPACKAUTH
SYSIBM.SYSDBAUTH
SYSIBM.SYSCOLAUTH

Also make sure to specify valid data set names for Extract and Control files on output specification screen.
 
2. Run DDL report (Or generate REDO DDL) with GRANT and REVOKE statements included, but use the previously
generated Extract and Control files as the source for the report. That way you will filter out all DDL statements you
are not interested in and only GRANT/REVOKE DCL statements will remain in the output.