Does Plan Analyzer allow users to bypass Db2 security

Products

• Plan Analyzer for DB2 for z/OS

Issue/Introduction

Does Plan Analyzer for Db2 for z/OS (PPA) allow users to bypass Db2 security?

Resolution

PPA does not permit users the ability to bypass Db2 security. In PPA user guide under Operational considerations, we discuss the plan authorizations as an additional
layer of security, but in addition a user must possess the following authorization to update the catalog.

You can update the Db2 catalog statistics using the Plan Analyzer Catalog statistics facility when you have at least one of the following:

* SYSADM authority
* UPDATE authority on the catalog table or column being updated