I have a strange problem . in a db i have a 3 users that i revoked the dbadm privilage from them.
After one or two days, when i checkd theirs privilage, i saw that they have dbadb privilage again .

the action i made :
1. db2 revoke dbadm on database from user xxx
2. db2 select DBADMAUTH form syscat.dbauth where GRANTEE='XXX'(return N)
3. After 1-2 days ,the same select returm Y.

I revoked the privilage more few times and allways after some days the users have the privilage again .

I wonder what could happend in db ?
Is somebody re- granted those users ? How can i chack it ?
In db2diag (diaglevel 4) I don't see ane grant order.
Tks,
Eli

wht evni this db is ?? i believe the db is getting restored from the image were this priviledges are granted.

regds
Paul

Hi Paul,
The Env is unix aix , db2 v9.5.
No restore form image was maid betweem the revoke privilage and re-grant.

Why was the GRANTEE after the privileges re-appeared? I would search for that. Maybe you have some application that grants those privileges if they are missing.

Hi Knut,
I don't know about any application that perform this privilage,
but maybe someone write something like this without tell me .
How can i catch this applicatioin ? is any log / trace can catch it ?

Eli

Check out the audit facility: Introduction to the DB2 audit facility - IBM DB2 9.7 for Linux, UNIX, and Windows

Did you have a look at the catalog who the GRANTEE for the privileges was?