Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

issue with grant

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> DB2
View previous topic :: :: View next topic  
Author Message
srinivas_naikk

New User


Joined: 23 Jul 2007
Posts: 26
Location: India

PostPosted: Wed Jul 13, 2011 2:56 pm    Post subject: issue with grant
Reply with quote

Hi All,

I am facing issues while granting access on the views to other users in DB2 v10

I have created a table TAB1 using ID1 and granted select on those tables to others. for eg: ID2 using

GRANT SELECT ON TAB1 to ID2;

the above statment is successful

I have created a view VIEW1 on TAB1 and trying to grant select on that view to ID2. It is failing with insufficient authority to grant on view

when I query, SYSIBM.SYSTABAUTH for table, SELECTAUTH has G which means, it has an option to grant to other users

However, when I query SYSIBM.SYSTABAUTH for view, under SELECTAUTH only Y is there and no with grant option G.

The creator of the view is not getting with Grant option.

ID1 has SYSCTRL privilege.

but if I grant select on those views using authorization ID which has SYSADM privileges, it is working.

Let me know where is the issue

thanks in advance
Back to top
View user's profile Send private message

sushanth bobby

Senior Member


Joined: 29 Jul 2008
Posts: 1013
Location: India

PostPosted: Thu Jul 14, 2011 8:11 pm    Post subject:
Reply with quote

Srinivas,

SYSCTRL authority cannot SELECT user data.

Thanks,
Sushanth
Back to top
View user's profile Send private message
gylbharat

Active Member


Joined: 31 Jul 2009
Posts: 565
Location: Bangalore

PostPosted: Fri Jul 15, 2011 11:37 am    Post subject:
Reply with quote

Quote:

Users with SYSCTRL authority can perform all administrative and maintenance
commands within the instance. However, unlike SYSADM users, they cannot access
any data within the databases unless they are granted the privileges required to do so
Back to top
View user's profile Send private message
srinivas_naikk

New User


Joined: 23 Jul 2007
Posts: 26
Location: India

PostPosted: Fri Jul 15, 2011 3:18 pm    Post subject:
Reply with quote

Hi Sushanth,

Yes, I know SYSCTRL will not have access to USER DATA.

Hence I am trying grant SELECT access on the tables created

But I am unable to grant it and is failing while granting though the owner of the table is trying to grant on the view.

Granting on table is successful, but granting on the view created for the table is failing

Regards,
Srinivas
Back to top
View user's profile Send private message
dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Fri Jul 15, 2011 9:22 pm    Post subject:
Reply with quote

Hello,

Quote:
Yes, I know SYSCTRL will not have access to USER DATA.

Hence I am trying grant SELECT access on the tables created
What are you trying to "grant select" on - the tables created are the user data. . .

Possibly there is something i misunderstand?
Back to top
View user's profile Send private message
srinivas_naikk

New User


Joined: 23 Jul 2007
Posts: 26
Location: India

PostPosted: Fri Jul 15, 2011 10:33 pm    Post subject:
Reply with quote

Hi,

Sorry my previous post was confusing.

Let me explain again.

I have created a table and was able to grant SELECT access to others on the table. The users are able to query the table.

I have also created a VIEW on that table. I am trying to grant SELECT on the view created for other users. But the GRANT SELECT on that view is failing stating "the grantor does not have privileges to grant select on the VIEW".

Am i missing anywhere?

Thanks in advance

Regards,
Srinivas
Back to top
View user's profile Send private message
Nic Clouston

Global Moderator


Joined: 10 May 2007
Posts: 1722
Location: UK

PostPosted: Fri Jul 15, 2011 11:13 pm    Post subject:
Reply with quote

You are missing the fact that a view is data and not a table and that you are not authorised to grant privileges on data.
Back to top
View user's profile Send private message
srinivas_naikk

New User


Joined: 23 Jul 2007
Posts: 26
Location: India

PostPosted: Sat Jul 16, 2011 12:11 pm    Post subject: Reply to: issue with grant
Reply with quote

Yes, thats true.
I have a query again

Won't the creator of view or table have permission to grant select on the table/views created?
Back to top
View user's profile Send private message
dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Sun Jul 17, 2011 1:35 am    Post subject:
Reply with quote

Hello,

As you have seen - this depends on the permissions of the creator. . .
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> DB2 All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts Execessive parameter issue Sumeendar JCL & VSAM 5 Mon Dec 19, 2016 4:35 pm
No new posts DFHRESPONSE returns issue divated CICS 3 Wed Nov 02, 2016 6:32 pm
No new posts Can sending 5 MB data between cobol p... Kevin Vaz CICS 12 Tue Oct 18, 2016 4:50 pm
No new posts REXX Screen not working due to LINKED... sundarkudos CLIST & REXX 1 Mon May 09, 2016 1:44 pm
No new posts Issue in sending zip file as mail att... ajithajt JCL & VSAM 8 Thu Apr 07, 2016 9:11 am


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us