running table snapshot as regular login

[Ultrak The DBA]

select 'YYY', substr(TABLESPACE_NAME,1, 18) as TABLESPACE_NAME,
CURRENT DATE,
int((TOTAL_PAGES * PAGE_SIZE)/(1024*1024)) as TOTAL,
int((USED_PAGES * PAGE_SIZE)/(1024*1024)) as USED
from table (snapshot_tbs_CFG(cast(null as varchar(20)), -1 )) as x;

I am trying to get a regular user to run this query and it fails with
a

SQL0443N Routine "SYSPROC.SNAPSHOT_TBS_CFG" (specific name
"SNAPSHOT_TBS_CFG") has returned an error SQLSTATE with diagnostic
text "".
SQLSTATE=38553

I granted exec permission to SNAPSHOT_TBS_CFG for this user and it
still did not work.
I did put the user's group in sysmon_group and recycled the server and
that worked, but is that the only way for this to work?

Thank you for your assistance.

Kermit Lowry

[Ian]

Ultrak The DBA wrote:

I did put the user's group in sysmon_group and recycled the server and
that worked, but is that the only way for this to work?

Yes, that's the only way.

[Knut Stolze]

Ultrak The DBA wrote:

select 'YYY', substr(TABLESPACE_NAME,1, 18) as TABLESPACE_NAME,
CURRENT DATE,
int((TOTAL_PAGES * PAGE_SIZE)/(1024*1024)) as TOTAL,
int((USED_PAGES * PAGE_SIZE)/(1024*1024)) as USED
from table (snapshot_tbs_CFG(cast(null as varchar(20)), -1 )) as x;

I am trying to get a regular user to run this query and it fails with
a

SQL0443N Routine "SYSPROC.SNAPSHOT_TBS_CFG" (specific name
"SNAPSHOT_TBS_CFG") has returned an error SQLSTATE with diagnostic
text "".
SQLSTATE=38553

I granted exec permission to SNAPSHOT_TBS_CFG for this user and it
still did not work.
I did put the user's group in sysmon_group and recycled the server and
that worked, but is that the only way for this to work?

No, it's not the only way. You can set the DB2 registry variable
DB2_SNAPSHOT_NOAUTH to "yes". Then all snapshot operations do not require
authorization. Note, however, that this has security and performance
implications and you should make sure you understand them and they are
acceptable.

--
Knut Stolze
DB2 z/OS Utilities Development
IBM Germany

[Ian]

Knut Stolze wrote:

>
No, it's not the only way. You can set the DB2 registry variable
DB2_SNAPSHOT_NOAUTH to "yes". Then all snapshot operations do not require
authorization. Note, however, that this has security and performance
implications and you should make sure you understand them and they are
acceptable.

Be careful, too: DB2_SNAPSHOT_NOAUTH was deprecated in 8.2 (8.1
Fixpack 7), when SYSMON_GROUP was added.