dbTalk Databases Forums  

public priviledge on create procedure

comp.databases.ibm-db2 comp.databases.ibm-db2


Discuss public priviledge on create procedure in the comp.databases.ibm-db2 forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Anwei Shen
 
Posts: n/a

Default public priviledge on create procedure - 08-29-2011 , 02:10 PM






db2 udb 9.7.4 on AIX,
I have revoked dbadm/CREATE_NOT_FENCED/IMPLICIT_SCHEMA from pubilc and
user, but still they can create procedures.

db2 => CONNECT

Database Connection Information

Database server = DB2/AIX64 9.7.4
SQL authorization ID = PREAD
Local database alias = PDB

db2 => select * from SYSCAT.dbauth where GRANTEE in ('PREAD' ,
'PUBLIC')

GRANTOR
GRANTORTYPE
GRANTEE
GRANTEETYPE BINDADDAUTH CONNECTAUTH CREATETABAUTH DBADMAUTH
EXTERNALROUTINEAUTH IMPLSCHEMAAUTH LOADAUTH NOFENCEAUTH
QUIESCECONNECTAUTH LIBRARYADMAUTH SECURITYADMAUTH SQLADMAUTH
WLMADMAUTH EXPLAINAUTH DATAACCESSAUTH ACCESSCTRLAUTH
--------------------------------------------------------------------------------------------------------------------------------
-----------
--------------------------------------------------------------------------------------------------------------------------------
----------- ----------- ----------- ------------- ---------
------------------- -------------- -------- -----------
------------------ -------------- --------------- ----------
---------- ----------- -------------- --------------
SYSIBM
S
PUBLIC
G N Y N N
N N N N
N N N N
N N N N
DB2PMTP
U
PMTPREAD
U N Y N N
N N N N
N N N N
N N N N

2 record(s) selected.

db2 => CREATE PROCEDURE TEST (in medianSalary DOUBLE) LANGUAGE
SQL BEGIN END
DB20000I The SQL command completed successfully.
db2 => DROP PROCEDURE TEST
DB20000I The SQL command completed successfully.

Reply With Quote
  #2  
Old   
MarkB
 
Posts: n/a

Default Re: public priviledge on create procedure - 08-30-2011 , 12:25 PM






On Aug 29, 11:10*pm, Anwei Shen <shenan... (AT) gmail (DOT) com> wrote:
Quote:
db2 udb 9.7.4 on AIX,
I have revoked dbadm/CREATE_NOT_FENCED/IMPLICIT_SCHEMA from pubilc and
user, but still they can create procedures.

db2 => *CONNECT

* *Database Connection Information

*Database server * * * *= DB2/AIX64 9.7.4
*SQL authorization ID * = PREAD
*Local database alias * = PDB

db2 => *select * *from SYSCAT.dbauth where GRANTEE in ('PREAD' ,
'PUBLIC')

GRANTOR
GRANTORTYPE
GRANTEE
GRANTEETYPE BINDADDAUTH CONNECTAUTH CREATETABAUTH DBADMAUTH
EXTERNALROUTINEAUTH IMPLSCHEMAAUTH LOADAUTH NOFENCEAUTH
QUIESCECONNECTAUTH LIBRARYADMAUTH SECURITYADMAUTH SQLADMAUTH
WLMADMAUTH EXPLAINAUTH DATAACCESSAUTH ACCESSCTRLAUTH
--------------------------------------------------------------------------- -----------------------------------------------------
-----------
--------------------------------------------------------------------------- -----------------------------------------------------
----------- ----------- ----------- ------------- ---------
------------------- -------------- -------- -----------
------------------ -------------- --------------- ----------
---------- ----------- -------------- --------------
SYSIBM
S
PUBLIC
G * * * * * N * * * * * Y * * * * * N * * * * * * N
N * * * * * * * * * N * * * * * * *N * * * *N
N * * * * * * * * *N * * * * * * *N * * * * * * * N
N * * * * *N * * * * * N * * * * * * *N
DB2PMTP
U
PMTPREAD
U * * * * * N * * * * * Y * * * * * N * * * * * * N
N * * * * * * * * * N * * * * * * *N * * * *N
N * * * * * * * * *N * * * * * * *N * * * * * * * N
N * * * * *N * * * * * N * * * * * * *N

* 2 record(s) selected.

db2 => * CREATE PROCEDURE TEST (in medianSalary DOUBLE) * * *LANGUAGE
SQL * *BEGIN * *END
DB20000I *The SQL command completed successfully.
db2 => * DROP PROCEDURE TEST
DB20000I *The SQL command completed successfully.
Hi Anwei,

you don't have to have CREATE_NOT_FENCED for SQL routines:
http://publib.boulder.ibm.com/infoce.../r0008329.html
You have to have this authority for EXTERNAL not fenced routines:
http://publib.boulder.ibm.com/infoce.../r0008328.html

Sincerely,
Mark B.

Reply With Quote
  #3  
Old   
Anwei Shen
 
Posts: n/a

Default Re: public priviledge on create procedure - 08-30-2011 , 01:51 PM



Yes, I tested today, I need to run this to avoid unwanted procedure.

REVOKE CREATEIN ON SCHEMA

On Aug 30, 1:25*pm, MarkB <mark.barinst... (AT) gmail (DOT) com> wrote:
Quote:
On Aug 29, 11:10*pm, Anwei Shen <shenan... (AT) gmail (DOT) com> wrote:





db2 udb 9.7.4 on AIX,
I have revoked dbadm/CREATE_NOT_FENCED/IMPLICIT_SCHEMA from pubilc and
user, but still they can create procedures.

db2 => *CONNECT

* *Database Connection Information

*Database server * * * *= DB2/AIX64 9.7.4
*SQL authorization ID * = PREAD
*Local database alias * = PDB

db2 => *select * *from SYSCAT.dbauth where GRANTEE in ('PREAD' ,
'PUBLIC')

GRANTOR
GRANTORTYPE
GRANTEE
GRANTEETYPE BINDADDAUTH CONNECTAUTH CREATETABAUTH DBADMAUTH
EXTERNALROUTINEAUTH IMPLSCHEMAAUTH LOADAUTH NOFENCEAUTH
QUIESCECONNECTAUTH LIBRARYADMAUTH SECURITYADMAUTH SQLADMAUTH
WLMADMAUTH EXPLAINAUTH DATAACCESSAUTH ACCESSCTRLAUTH
--------------------------------------------------------------------------- -----------------------------------------------------
-----------
--------------------------------------------------------------------------- -----------------------------------------------------
----------- ----------- ----------- ------------- ---------
------------------- -------------- -------- -----------
------------------ -------------- --------------- ----------
---------- ----------- -------------- --------------
SYSIBM
S
PUBLIC
G * * * * * N * * * * * Y * * * * * N ** * * * * N
N * * * * * * * * * N * * * * * * *N * * * *N
N * * * * * * * * *N * * * * * * *N ** * * * * * N
N * * * * *N * * * * * N * * * * * * *N
DB2PMTP
U
PMTPREAD
U * * * * * N * * * * * Y * * * * * N ** * * * * N
N * * * * * * * * * N * * * * * * *N * * * *N
N * * * * * * * * *N * * * * * * *N ** * * * * * N
N * * * * *N * * * * * N * * * * * * *N

* 2 record(s) selected.

db2 => * CREATE PROCEDURE TEST (in medianSalary DOUBLE) * * *LANGUAGE
SQL * *BEGIN * *END
DB20000I *The SQL command completed successfully.
db2 => * DROP PROCEDURE TEST
DB20000I *The SQL command completed successfully.

Hi Anwei,

you don't have to have CREATE_NOT_FENCED for SQL routines:http://publib.boulder.ibm.com/infoce...pic/com.ibm.db...
You have to have this authority for EXTERNAL not fenced routines:http://publib.boulder.ibm.com/infoce...pic/com.ibm.db...

Sincerely,
Mark B.- Hide quoted text -

- Show quoted text -

Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.