469,923 Members | 1,512 Online
Bytes | Developer Community
New Post

Home Posts Topics Members FAQ

Post your question to a community of 469,923 developers. It's quick & easy.

weird SELECT privilege issue

I have given 'SELECT','INSERT' privileges to a user 'group' for a set of
tables.

But a user gets a prompt that he does not the 'SELECT' privilege on that
particular table. The user does belong to the group which has been granted
the privileges.
When I give the privileges to the user (only the user, not the group), it
works fine.
He is also able to select the table properly in CONTROL CENTER but he gets
the error message in Development Center while compiling a SP.

Any idea for this strange behaviour??

Cheers,
San.

Oct 26 '06 #1
5 1578
shsandeep wrote:
I have given 'SELECT','INSERT' privileges to a user 'group' for a set of
tables.

But a user gets a prompt that he does not the 'SELECT' privilege on that
particular table. The user does belong to the group which has been granted
the privileges.
When I give the privileges to the user (only the user, not the group), it
works fine.
He is also able to select the table properly in CONTROL CENTER but he gets
the error message in Development Center while compiling a SP.

Any idea for this strange behaviour??
DB2 does not consider groups for static SQL because it can't track
membership changes. Could that be it?

Cheers
Serge
--
Serge Rielau
DB2 Solutions Development
IBM Toronto Lab

IOD Conference
http://www.ibm.com/software/data/ond...ness/conf2006/
Oct 26 '06 #2
That is exactly it.
It is stated in the docs. that when you have bindadd privileges (to build
packages) you are required to have the EXPLICIT privilege to do all
statements in it.
Group membership is IMPLICIT save for PUBLIC which is ECEXPLICIT.
Regards, Pierre.

--
Pierre Saint-Jacques
SES Consultants Inc.
514-737-4515
"Serge Rielau" <sr*****@ca.ibm.coma écrit dans le message de news:
4q************@individual.net...
shsandeep wrote:
>I have given 'SELECT','INSERT' privileges to a user 'group' for a set of
tables.

But a user gets a prompt that he does not the 'SELECT' privilege on that
particular table. The user does belong to the group which has been
granted
the privileges.
When I give the privileges to the user (only the user, not the group), it
works fine.
He is also able to select the table properly in CONTROL CENTER but he
gets
the error message in Development Center while compiling a SP.

Any idea for this strange behaviour??
DB2 does not consider groups for static SQL because it can't track
membership changes. Could that be it?

Cheers
Serge
--
Serge Rielau
DB2 Solutions Development
IBM Toronto Lab

IOD Conference
http://www.ibm.com/software/data/ond...ness/conf2006/
Oct 26 '06 #3
But there are other procedures running without these errors.
So far, all privileges have always been given to the 'group' and never the
individual user.

Cheers,
San.

Oct 26 '06 #4
shsandeep wrote:
But there are other procedures running without these errors.
So far, all privileges have always been given to the 'group' and never the
individual user.
Maybe these procedures are using dynamic SQL (PREPARE/EXECUTE)

Cheers
Serge

--
Serge Rielau
DB2 Solutions Development
IBM Toronto Lab

IOD Conference
http://www.ibm.com/software/data/ond...ness/conf2006/
Oct 26 '06 #5
Serge Rielau wrote:
shsandeep wrote:
>But there are other procedures running without these errors.
So far, all privileges have always been given to the 'group' and never
the
individual user.
Maybe these procedures are using dynamic SQL (PREPARE/EXECUTE)
Further are you sure that these procedures were created by the same user
and not the DBA?

--
Serge Rielau
DB2 Solutions Development
IBM Toronto Lab

IOD Conference
http://www.ibm.com/software/data/ond...ness/conf2006/
Oct 26 '06 #6

This discussion thread is closed

Replies have been disabled for this discussion.

Similar topics

3 posts views Thread by redneck_kiwi | last post: by
reply views Thread by Chris Callahan | last post: by
reply views Thread by Christophe Poirier | last post: by
5 posts views Thread by Mike Gemmell | last post: by
2 posts views Thread by Praveen_db2 | last post: by
By using this site, you agree to our Privacy Policy and Terms of Use.