RC/Secure not removing authorities from Global Temporary Tables when executing batch RSL#RVKE.

Products

• RC/Secure for DB2 for z/OS
• RC/Query for DB2 for z/OS

Issue/Introduction

When executing the RC/Secure for Db2 for z/OS (RCS) batch job to remove authorities from Global Temporary Tables (GTT), there are no entries found even when entries can be displayed online via RC/Query for Db2 for z/OS (RCQ) for User All|User Table authorization.

RCS r20.0 PTF LU05836 is applied and implemented.

 

Environment

Release : 20.0

Resolution

RCQ User All|User Table authorization is displaying the entry for the Global Temporary Table which is due to ownership as the userid is the Creator of GTT.

When the GTT was created SYSIBM.SYSTABAUTH is populated with "G" values for ALTERAUTH, DELETEAUTH, etc.. along with GRANTOR of the userid which created the GTT.

PF11 within the RCQ User All|User Table display you will note "G" entries for ALT, DEL, etc...

 

RCS online will not show this authorization as no REVOKE is possible in this scenario:

From the Database Management Solutions for Db2 for z/OS main menu: 

4 RC/Secure
2 - GRS  Standard Grant/Revoke Services

Then enter the following values:
Option => R
Grantee=> <userid of GTT creator>
Class  => A TABLE