Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

-551 on SYSIBM.SYSTABLES, SYSIBM.SYSTABAUTH

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> DB2
View previous topic :: :: View next topic  
Author Message
baramesh

New User


Joined: 20 May 2008
Posts: 21
Location: bangalore

PostPosted: Mon Dec 23, 2013 6:29 pm    Post subject: -551 on SYSIBM.SYSTABLES, SYSIBM.SYSTABAUTH
Reply with quote

DB2 said I am not authorised to acces SYSIBM.SYSTABAUTH and SYSIBM.SYSTABLES with an SQL code -551. I tried to issue grant on these tables . this alos failed saying MDG (MDG= RACF user id specified on my job card USER=MDG) has no previlege to perform the operation grant on the said tables to ASDFGTH. ASDFGTH is my used id.

Please advise me
Back to top
View user's profile Send private message

dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Mon Dec 23, 2013 8:06 pm    Post subject:
Reply with quote

Hello,

You need to work with your dba or security people.
Back to top
View user's profile Send private message
baramesh

New User


Joined: 20 May 2008
Posts: 21
Location: bangalore

PostPosted: Tue Dec 24, 2013 3:51 pm    Post subject:
Reply with quote

Thanks very much, dick!!

But I am able to query certain DB2 catalog tables like SYSIBM.SYSCOLUMNS, SYSIBM.SYSCOLAUTH and FROM SYSIBM.SYSCONSTDEP etc. Should I understand that privileges to these tables were automatically given to me and privileges to tables like SYSIBM.SYSTABAUTH were restricted for me for security reasons?....

However, SELECT privilege on SYSIBM.SYSTABAUTH helps me to understand and resolve many issues that I encounter during my application development. Please advice me on how correct is it to restrict SELECT on SYSIBM.SYSTABAUTH to developers.
Back to top
View user's profile Send private message
enrico-sorichetti

Global Moderator


Joined: 14 Mar 2007
Posts: 10202
Location: italy

PostPosted: Tue Dec 24, 2013 4:08 pm    Post subject: Reply to: -551 on SYSIBM.SYSTABLES, SYSIBM.SYSTABAUTH
Reply with quote

wiser to speak to Your audit and security department.

usually also to know who can do/access what is considered a security exposure
( and a developer does not certainly have the need to know )
Back to top
View user's profile Send private message
GuyC

Senior Member


Joined: 11 Aug 2009
Posts: 1278
Location: Belgium

PostPosted: Tue Dec 24, 2013 4:13 pm    Post subject:
Reply with quote

Developers shouldn't be able to acquire any list of userids.

You might be able to get a view on tabauth where GRANTEETYPE = 'P' if you have a cooperative DBA.
Back to top
View user's profile Send private message
baramesh

New User


Joined: 20 May 2008
Posts: 21
Location: bangalore

PostPosted: Tue Dec 24, 2013 6:25 pm    Post subject:
Reply with quote

Thank you all,

I got it. No access to these tables
SYSIBM.SYSCOLAUTH
SYSIBM.SYSCONTEXTAUTHIDS
SYSIBM.SYSDBAUTH
SYSIBM.SYSPACKAUTH
SYSIBM.SYSPLANAUTH
SYSIBM.SYSRESAUTH
SYSIBM.SYSROUTINEAUTH
SYSIBM.SYSSCHEMAAUTH
SYSIBM.SYSSEQUENCEAUTH
SYSIBM.SYSTABAUTH
SYSIBM.SYSUSERAUTH

However, all other catalog tables can be accessed. I understood the concept behind it......thanks all agin.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> DB2 All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts Can not find SQL statement of package... chaoj DB2 2 Wed Mar 11, 2015 12:00 pm
No new posts SYSIBM.SYSPACKSTMT - DB2 V9 TO V10 gylbharat DB2 22 Fri Oct 25, 2013 3:36 pm
No new posts Copy Pending status flag in the SYSIB... pmvino DB2 1 Tue May 24, 2011 12:34 pm
No new posts Need DATE from DB2 SYSIBM.SYSDUMMY1 subbu1522 DB2 5 Thu Feb 17, 2011 8:23 pm
No new posts Clarification regarding SYSIBM.SYSDUM... dick scherrer DB2 5 Thu Dec 02, 2010 11:37 am


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us