Find out if a Db2 authid has Db2 12 UNLOAD table authority in RC/Query

Products

• RC/Query for DB2 for z/OS

Issue/Introduction

Which RC/Query for Db2 for z/OS (RCQ) report is able to display the Db2 12 UNLOAD table authority for a given Db2 table and Db2 authid?

Resolution

The RC/Query report Table User Authorization is able to display the UNLOAD authority on the Db2 Table Object.

"Table User Authorization Inq"

The information can be found on the right hand screen of the report:

Main Screen:

RQTUA  20.0   ------ RC/Q Table User Authorization Inq ------ yyyy/mm/dd hh:mm
COMMAND ===>                                                  SCROLL ===> CSR

 DB2 Object ===> T                       Option  ===> UA   Where => N
 Table Name ===> Table1                > Creator ===> authid                 >
  Qualifier ===> *                     > Grantor ===> *                      >
Loc: LOCAL ---------- SSID: ssid ----------authid -           LINE 1 OF 2    >
CMD          TABLE/USER      GTE TYP  CTR/GRNTOR     DATE      TIME   AUT ALT
________ Table1              
________       authid        AUTHID     authid    yyyy/mm/dd hh:mm:ss      G


PF11 to second screen

RQTUA  20.0   ------ RC/Q Table User Authorization Inq ------ yyyy/mm/dd hh:mm
COMMAND ===>                                                  SCROLL ===> CSR

 DB2 Object ===> T                       Option  ===> UA   Where => N
 Table Name ===> Table1                > Creator ===> authid                 >
  Qualifier ===> *                     > Grantor ===> *                      >
Loc: LOCAL ---------- SSID: ssid ----------authid  -          LINE 1 OF 2  <
CMD          TABLE/USER      DEL INDX INS SEL UPD UPDC REF REFC TRIG  UNLD
________ Table1
________       authid         G   G    G   G   G        G        G     G

Field:  UNLD

Description:  The value denoting whether the grantee (user or role) can unload the table. Unload is not supported on auxiliary tables or views.
Possible values are:

Values:  blank     Privilege not held.
         G         Privilege held with GRANT option.
         Y         Privilege held without GRANT option.

The report is also available in BATCH using RC/QUERY Batch Reporting: The BR command.
The Batch report looks like this:

FOR REQ:   OBJECT=> T                    OPTION=> UA                           .
             ITEM=> Table1              CREATOR=> authid   WHERE=> N           .
        QUALIFIER=> *                   GRANTOR=> *                            .
         DB2 SSID=> ssid               LOCATION=> LOCAL                        .
RQE00015: NORMAL COMPLETION                                                    .
RQE01000: INPUT FILE: SYSIN, AT END; EXECUTION COMPLETED                       .
yyyy/mm/dd hh:mm
                 DB2 SSID:ssid     ----- RC/Q TABLE USER AUTHORIZATION INQ -----                                  Page      1.1
LOCATION: LOCAL
    TABLE/USER      GTE TYP  CTR/GRNTOR     DATE      TIME   AUT ALT DEL INDX INS SEL UPD UPDC REF REFC TRIG  UNLD
TFT_CURRENCY                 authid
      authid        AUTHID      authid   yyyy/mm/yy hh:mm:ss      G   G   G    G   G   G        G        G     G

This was introduced via PTFs: LU01705 and LU01706.

Additional Information

GRANT UNLOAD Table Authority Support

See section : GRANT UNLOAD Table Authority Support

Unload Authority is displayed in other reports also:

User - Table Authorization (U-TA)
Role - Table Authorization (RO-TA)