dbTalk Databases Forums  

Struggling granting SYSADM on AIX

comp.databases.ibm-db2 comp.databases.ibm-db2


Discuss Struggling granting SYSADM on AIX in the comp.databases.ibm-db2 forum.



Reply
 
Thread Tools Display Modes
  #1  
Old   
Richard
 
Posts: n/a

Default Struggling granting SYSADM on AIX - 03-15-2011 , 09:19 AM






AIX 5.3 - DB2 9.7FP3a

I'm logged in as isurvdb2

If I look in smitty, it says my primary group is gsurvdb2.

If I look at the SYSADM_GROUP dbm parameter, it says GSURVDB2.

Shouldn't I have read to all tables? I've logged out and back in.
I've stopped/restarted the instance.

Thanks.

Reply With Quote
  #2  
Old   
Ian
 
Posts: n/a

Default Re: Struggling granting SYSADM on AIX - 03-15-2011 , 10:41 AM






On Mar 15, 8:19*am, Richard <rmcgor... (AT) gmail (DOT) com> wrote:
Quote:
AIX 5.3 - DB2 9.7FP3a

I'm logged in as isurvdb2

If I look in smitty, it says my primary group is gsurvdb2.

If I look at the SYSADM_GROUP dbm parameter, it says GSURVDB2.

Shouldn't I have read to all tables? *I've logged out and back in.
I've stopped/restarted the instance.
No, in DB2 9.7, IBM added the concept of separation of duties,
and added several new privileges, including DATAACCESS.

For databases that were created using 9.7, users with SYSADM
authority do not automatically get DATAACCESS privilege**. A user
with SECADM authority must grant DATAACCESS.

You can read about these changes here:

http://publib.boulder.ibm.com/infoce.../c0054241.html


** For databases upgraded from DB2 9.5 or earlier to 9.7, SYSADM
users will automatically be granted DATAACCESS and ACCESSCTRL,
so the upgrade won't break applications.

Reply With Quote
  #3  
Old   
Richard
 
Posts: n/a

Default Re: Struggling granting SYSADM on AIX - 03-16-2011 , 08:42 AM



On Mar 15, 12:41*pm, Ian <ianb... (AT) mobileaudio (DOT) com> wrote:

Quote:
No, in DB2 9.7, IBM added the concept of separation of duties,
and added several new privileges, including DATAACCESS.

For databases that were created using 9.7, users with SYSADM
authority do not automatically get DATAACCESS privilege**. *A user
with SECADM authority must grant DATAACCESS.

You can read about these changes here:

http://publib.boulder.ibm.com/infoce...pic/com.ibm.db...

** For databases upgraded from DB2 9.5 or earlier to 9.7, SYSADM
* *users will automatically be granted DATAACCESS and ACCESSCTRL,
* *so the upgrade won't break applications.

Thanks. This database was upgraded to 9.7, so you'd think I'd have
the
required access, but since the instance owner account was not properly
assigned to the SYSADM_GROUP when we upgraded, it might explain why
I'm seeing the issue.

Reply With Quote
Reply




Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off



Powered by vBulletin Version 3.5.3
Copyright ©2000 - 2012, Jelsoft Enterprises Ltd.