How can I find out what objects are setup with more than just SELECT authority?

Document ID:  TEC490390
Last Modified Date:  07/05/2017
{{active ? 'Hide' : 'Show'}} Technical Document Details

Products

  • CA RC/Secure for DB2 for z/OS

Components

  • CA RC/Secure for DB2 for z/OS:RCSDB2
Introduction:

How can I find out what objects are setup with more than just SELECT authority?.

Instructions:

The PTI.PTRCS_APLDOM_0200 table contains the authorizations selected for the object. A SQL query can be executed to retrieve the information.

The AUTHS column on the table retains authorizations for the selected objects. The AUTHS column is defined VARCHAR(25). The first byte is empty. Bytes 2 through 25 indicate the authorizations granted for the object (Y, G, or blank).

The TABLE authorizations are defined in the following bytes of the column:

 Byte:                Authorization: 
----- -------------
2 ALL
3 Select
4 Insert
5 Delete
6 Update
7 Update Column
8 Index
9 Alter
10 Reference
11 Reference Column
12 Trigger

Additional information can be found in the RC/Secure for DB2 for z/OS User Guide, Appendix B which will provide more details on the table layout and additional objects.

Execute the following query to obtain a list of users who have a "Y" privilege:

SELECT *
FROM PTI.PTRCS_APLDOM_0200
WHERE 
 SUBSTR(AUTHS,2,1)  = X'E8' OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,4,1)  = X'E8') OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,5,1)  = X'E8') OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,6,1)  = X'E8') OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,7,1)  = X'E8') OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,8,1)  = X'E8') OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,9,1)  = X'E8') OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,10,1) = X'E8') OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,11,1) = X'E8') OR 
 (SUBSTR(AUTHS,3,1)  = X'E8' AND 
 SUBSTR(AUTHS,12,1) = X'E8') 

The X'E8' value represents a "Y" privilege. This value can be changed to X'C7' to accommodate the "G" privilege.

Please help us improve!

Will this information enable you to resolve your issue?

Please tell us what we can do better.

{{feedbackText.length ? feedbackText.length : '0'}}/255

{{status}}

Not what you were looking for?

Search Again >

Product Information

Support by Product >

Communities

Join a Community >

Chat with CA

Just give us some brief information and we'll connect you to the right CA ExpertCA sales representative.

Our hours of availability are 8AM - 5PM CST.

All Fields Required

connecting

We're matching your request.

Unfortunately, we can't connect you to an agent. If you are not automatically redirected please click here.

  • {{message.agentProfile.name}} will be helping you today.

    View Profile


  • Transfered to {{message.agentProfile.name}}

    {{message.agentProfile.name}} joined the conversation

    {{message.agentProfile.name}} left the conversation

  • Your chat with {{$storage.chatSession.messages[$index - 1].agentProfile.name}} has ended.
    Thank you for your interest in CA.


    Rate Your Chat Experience.

    {{chat.statusMsg}}

agent is typing