Results 1 to 7 of 7
  1. #1
    Join Date
    Oct 2010
    Posts
    56

    Unanswered: revoke dbadm on database

    I have a strange problem . in a db i have a 3 users that i revoked the dbadm privilage from them.
    After one or two days, when i checkd theirs privilage, i saw that they have dbadb privilage again .

    the action i made :
    1. db2 revoke dbadm on database from user xxx
    2. db2 select DBADMAUTH form syscat.dbauth where GRANTEE='XXX'(return N)
    3. After 1-2 days ,the same select returm Y.

    I revoked the privilage more few times and allways after some days the users have the privilage again .

    I wonder what could happend in db ?
    Is somebody re- granted those users ? How can i chack it ?
    In db2diag (diaglevel 4) I don't see ane grant order.
    Tks,
    Eli

  2. #2
    Join Date
    Oct 2007
    Posts
    246
    wht evni this db is ?? i believe the db is getting restored from the image were this priviledges are granted.

    regds
    Paul

  3. #3
    Join Date
    Oct 2010
    Posts
    56
    Hi Paul,
    The Env is unix aix , db2 v9.5.
    No restore form image was maid betweem the revoke privilage and re-grant.

  4. #4
    Join Date
    Jan 2007
    Location
    Jena, Germany
    Posts
    2,721
    Why was the GRANTEE after the privileges re-appeared? I would search for that. Maybe you have some application that grants those privileges if they are missing.
    Knut Stolze
    IBM DB2 Analytics Accelerator
    IBM Germany Research & Development

  5. #5
    Join Date
    Oct 2010
    Posts
    56
    Hi Knut,
    I don't know about any application that perform this privilage,
    but maybe someone write something like this without tell me .
    How can i catch this applicatioin ? is any log / trace can catch it ?

    Eli

  6. #6
    Join Date
    Jun 2003
    Location
    Toronto, Canada
    Posts
    5,516
    Provided Answers: 1

  7. #7
    Join Date
    Jan 2007
    Location
    Jena, Germany
    Posts
    2,721
    Did you have a look at the catalog who the GRANTEE for the privileges was?
    Knut Stolze
    IBM DB2 Analytics Accelerator
    IBM Germany Research & Development

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •