Grant authorizations to certain products without the grant option within Database Management Solutions for Db2 for z/OS.
Article ID: 60913
Updated On:
Products
Issue/Introduction
User was granted authorizations to certain products with the grant option. How can this be changed so that the user
can only have authorizations to certain products without the grant option within Database Management for Db2
for z/OS solutions.
Resolution
To grant the authorizations without the grant option, follow these steps:
- Select option "A - Product Authorizations" from the DB2 Products Main Menu.
- Enter the userid in the "TO ID" field to retrieve the current authorizations.
- Revoke the current authorizations by entering "R" next to the product or function that you want to revoke and press Enter.
- Grant the authorizations using "G", which will give the userid the authority for the products without the grant option.
Caveat : This facility will generate GRANT's or REVOKE's within DB2. This facility only generates the statements for DB2 to execute.
Make sure that the authid of the current user has the authority within DB2 to make these changes. To see the statement that
will be generated and executed , enter the "D" line command on the product line in the CMD column. Then check that the authid
currently in use has the authority to carry out the statements(s) for the target authid(TO ID) in question. This facility has no special
privilege to execute GRANT's or REVOKE's.
Feedback
