ADMIN_CMD and EXPORT

[jefftyzzer]

Friends:

The (v9) documentation for invoking LOAD via the ADMIN_CMD SP has this
to say:

"Since all load processes (and all DB2 server processes, in general)
are owned by the instance owner, and all of these processes use the
identification of the instance owner to access needed files, the
instance owner must have read access to input data files. These input
data files must be readable by the instance owner, regardless of who
invokes the command."

While calling EXPORT in the ADMIN_CMD SP, I'm noticing behavior that
leads me to believe that the blurb about LOAD above applies to EXPORT
in this context as well: in order to write my ixf and message files, I
had to grant the instance owner r/w to the target directory despite
the fact that the user id that invoked the SP (which in turn calls
ADMIN_CMD) already had those rights.

Can anyone confirm this?

Env: DB2 UDB LUW 8.2.3 on AIX 5.x

--Jeff

[Ian]

jefftyzzer wrote:

Friends:

The (v9) documentation for invoking LOAD via the ADMIN_CMD SP has this
to say:

"Since all load processes (and all DB2 server processes, in general)
are owned by the instance owner, and all of these processes use the
identification of the instance owner to access needed files, the
instance owner must have read access to input data files. These input
data files must be readable by the instance owner, regardless of who
invokes the command."

While calling EXPORT in the ADMIN_CMD SP, I'm noticing behavior that
leads me to believe that the blurb about LOAD above applies to EXPORT
in this context as well: in order to write my ixf and message files, I
had to grant the instance owner r/w to the target directory despite
the fact that the user id that invoked the SP (which in turn calls
ADMIN_CMD) already had those rights.

Can anyone confirm this?

Yes. This is exactly the same reason why the LOAD utility must have
read access to the data files.

The stored procedure is running on the server, executed as the instance
owner. This is just like you logging in as the instance owner
and performing the export directly.