MVSFORUMS.com

misi01

Is it possible to define DB2 grant on a table such that it's okay to run a Rexx script that inserts into a table but at the same time, not allow users to select/view the table (in the same way IMS can allow a specific MQ queue to start ONE specific IMS transaction)????
_________________
Michael

kolusu · Posted: Thu Aug 14, 2014 11:51 am Post subject:

misi01,

Do you want ALL your users to able to insert using a REXX script but they cannot see what they insert?

or is it just 1 person who wants to insert? and no one else can see the contents of the table?

Eitherway you can Code the GRANT statement in rexx and execute it with a commit

misi01 · Posted: Thu Sep 04, 2014 12:31 am Post subject:

I wanted all users to be able insert into the table but not to be able to access it in any other way.

Unfortunately, your suggestion (although simple) didn't cut it. Turned out (no idea why) I had to apply to our security department so they could set up the RACF authority.
After that. the Rexx script simply had top perform the actual insert, nothing else.
_________________
Michael

kolusu · Posted: Thu Sep 04, 2014 10:26 am Post subject:

misi01 · Posted: Thu Sep 04, 2014 12:22 pm Post subject:

The problem wasn't the grant (as far as I could see). I had a colleague testing it and he kept getting a RACF error on access to myuser.usage.insert (where usage was the name of the table and obviously insert was what the rexx code was trying to do)
_________________
Michael