One stop shop revoke tool

[cbielins]

I'm not sure if DB2 has a tool specifically for this, but I was
wondering if there's a revoke tool that will completely wipe a
group/user off the database without having to revoke from the table
level, index level, etc

Thanks,
Chris

[Ian]

cb******@gmail.com wrote:

I'm not sure if DB2 has a tool specifically for this, but I was
wondering if there's a revoke tool that will completely wipe a
group/user off the database without having to revoke from the table
level, index level, etc

In Control Center, if you find the User or Group you want and select
"Remove" this should revoke all privileges.

[cbielins]

Ahh yes the lovely Control Center, is there any way to do it from the
CLP?

[Serge Rielau]

cb******@gmail.com wrote:

Ahh yes the lovely Control Center, is there any way to do it from the
CLP?

Sure it's called CREATE PROCEDURE and CALL :-)
Should be less than 20 lines of SQL PL.
And takes about 1min to post teh script for subsequent generations in
this group :-)

Cheers
Serge
--
Serge Rielau
DB2 SQL Compiler Development
IBM Toronto Lab

[Gert van der Kooij]

In article <3v*************@individual.net>, sr*****@ca.ibm.com says...

cb******@gmail.com wrote:

Ahh yes the lovely Control Center, is there any way to do it from the
CLP?

Sure it's called CREATE PROCEDURE and CALL :-)
Should be less than 20 lines of SQL PL.
And takes about 1min to post teh script for subsequent generations in
this group :-)

Cheers
Serge

With the following SYSCAT tables more then 20 lines might be needed :)

COLAUTH
DBAUTH
INDEXAUTH
LIBRARYAUTH
PACKAGEAUTH
PASSTHRUAUTH
ROUTINEAUTH
SCHEMAAUTH
SEQUENCEAUTH
TABAUTH
TBSPACEAUTH
XMLOBJECTAUTH

[Knut Stolze]

Gert van der Kooij wrote:

In article <3v*************@individual.net>, sr*****@ca.ibm.com says...

cb******@gmail.com wrote:

> Ahh yes the lovely Control Center, is there any way to do it from the
> CLP?
>

Sure it's called CREATE PROCEDURE and CALL :-)
Should be less than 20 lines of SQL PL.
And takes about 1min to post teh script for subsequent generations in
this group :-)

Cheers
Serge

With the following SYSCAT tables more then 20 lines might be needed :)

COLAUTH
DBAUTH
INDEXAUTH
LIBRARYAUTH
PACKAGEAUTH
PASSTHRUAUTH
ROUTINEAUTH
SCHEMAAUTH
SEQUENCEAUTH
TABAUTH
TBSPACEAUTH
XMLOBJECTAUTH

I'd think that you're tempting us to actually verify this. ;-)

But given that you can write a single SELECT statement that covers all the
tables (using UNION), and given that a SELECT can be written in a single
line, I get about 5 to 10 lines that are needed in total.

--
Knut Stolze
DB2 Information Integration Development
IBM Germany

[Gert van der Kooij]

In article <dn**********@lc03.rz.uni-jena.de>, st****@de.ibm.com says...

Gert van der Kooij wrote:

In article <3v*************@individual.net>, sr*****@ca.ibm.com says...

cb******@gmail.com wrote:
> Ahh yes the lovely Control Center, is there any way to do it from the
> CLP?
>
Sure it's called CREATE PROCEDURE and CALL :-)
Should be less than 20 lines of SQL PL.
And takes about 1min to post teh script for subsequent generations in
this group :-)

Cheers
Serge

With the following SYSCAT tables more then 20 lines might be needed :)

COLAUTH
DBAUTH
INDEXAUTH
LIBRARYAUTH
PACKAGEAUTH
PASSTHRUAUTH
ROUTINEAUTH
SCHEMAAUTH
SEQUENCEAUTH
TABAUTH
TBSPACEAUTH
XMLOBJECTAUTH

I'd think that you're tempting us to actually verify this. ;-)

That's right :)
But given that you can write a single SELECT statement that covers all the
tables (using UNION), and given that a SELECT can be written in a single
line, I get about 5 to 10 lines that are needed in total.

You also need different revoke statements, but maybe they can be created
in the select statement already. I will give it a try at home tonight
(after watching soccer).

[Serge Rielau]

Gert van der Kooij wrote:

In article <dn**********@lc03.rz.uni-jena.de>, st****@de.ibm.com says...

Gert van der Kooij wrote:

In article <3v*************@individual.net>, sr*****@ca.ibm.com says...

cb******@gmail.com wrote:

>Ahh yes the lovely Control Center, is there any way to do it from the
>CLP?
>

Sure it's called CREATE PROCEDURE and CALL :-)
Should be less than 20 lines of SQL PL.
And takes about 1min to post teh script for subsequent generations in
this group :-)

Cheers
Serge
With the following SYSCAT tables more then 20 lines might be needed :)

COLAUTH
DBAUTH
INDEXAUTH
LIBRARYAUTH
PACKAGEAUTH
PASSTHRUAUTH
ROUTINEAUTH
SCHEMAAUTH
SEQUENCEAUTH
TABAUTH
TBSPACEAUTH
XMLOBJECTAUTH

I'd think that you're tempting us to actually verify this. ;-)

That's right :)

But given that you can write a single SELECT statement that covers all the
tables (using UNION), and given that a SELECT can be written in a single
line, I get about 5 to 10 lines that are needed in total.

You also need different revoke statements, but maybe they can be created
in the select statement already. I will give it a try at home tonight
(after watching soccer).

That would be Schalke vs Milan?
Knut is right with the UNION (ALL). But I do grant you one line per arm.
An a CASE expression should be able to nicely figure out the rest.

Cheers
Serge
--
Serge Rielau
DB2 SQL Compiler Development
IBM Toronto Lab

[Gert van der Kooij]

In article <3v*************@individual.net>, sr*****@ca.ibm.com says...

Gert van der Kooij wrote:

In article <dn**********@lc03.rz.uni-jena.de>, st****@de.ibm.com says...

Gert van der Kooij wrote:
In article <3v*************@individual.net>, sr*****@ca.ibm.com says...

>cb******@gmail.com wrote:
>
>>Ahh yes the lovely Control Center, is there any way to do it from the
>>CLP?
>>
>
>Sure it's called CREATE PROCEDURE and CALL :-)
>Should be less than 20 lines of SQL PL.
>And takes about 1min to post teh script for subsequent generations in
>this group :-)
>
>Cheers
>Serge
>

With the following SYSCAT tables more then 20 lines might be needed :)

COLAUTH
DBAUTH
INDEXAUTH
LIBRARYAUTH
PACKAGEAUTH
PASSTHRUAUTH
ROUTINEAUTH
SCHEMAAUTH
SEQUENCEAUTH
TABAUTH
TBSPACEAUTH
XMLOBJECTAUTH

I'd think that you're tempting us to actually verify this. ;-)

That's right :)

But given that you can write a single SELECT statement that covers all the
tables (using UNION), and given that a SELECT can be written in a single
line, I get about 5 to 10 lines that are needed in total.

You also need different revoke statements, but maybe they can be created
in the select statement already. I will give it a try at home tonight
(after watching soccer).

That would be Schalke vs Milan?

PSV vs Fenerbahce
Knut is right with the UNION (ALL). But I do grant you one line per arm.

Thank you very much :)