- db was created with RESTRICTIVE option
- user is part of the group that has DATAACCESS


Executing load when logged in as this user id:

db2 "load from /dev/null of del replace into db2inst1.test nonrecoverable"
SQL3015N An SQL error "-4707" occurred during processing.


db2diag.log has:

2012-07-25-09.45.30.661900-240 I2334A845 LEVEL: Info
PID : 7405766 TID : 15424 PROC : db2sysc 0
INSTANCE: db2inst1 NODE : 000 DB : xxxxxx
APPHDL : 0-17744 APPID: *LOCAL.db2inst1.120725134333
AUTHID : xxxxxx
EDUID : 15424 EDUNAME: db2agent (xxxxxx) 0
FUNCTION: DB2 UDB, oper system services, sqlofica, probe:10
DATA #1 : SQLCA, PD_DB2_TYPE_SQLCA, 136 bytes
sqlcaid : SQLCA sqlcabc: 136 sqlcode: -4707 sqlerrml: 22
sqlerrmc: SYSDEFAULTUSERWORKLOAD
sqlerrp : SQLRW00C
sqlerrd : (1) 0x801A006D (2) 0x00000000 (3) 0x00000000
(4) 0x00000000 (5) 0xFFFFFE70 (6) 0x00000000
sqlwarn : (1) (2) (3) (4) (5) (6)
(7) (8) (9) (10) (11)
sqlstate: 5U020



If I grant usage privilege on this workload, load completes successfully.




As per IBM DB2 9.7 Information Center for Linux, UNIX, and Windows,

Users with the ACCESSCTRL, DATAACCESS, DBADM, SECADM, or WLMADM authority implicitly have the USAGE privilege on all workloads.

...
USAGE privilege on SYSDEFAULTUSERWORKLOAD is granted to PUBLIC at database creation time, if the database is created without the RESTRICT option. Otherwise, the USAGE privilege must be explicitly granted by a user with ACCESSCTRL, WLMADM, or SECADM authority.


Should this user have implicit USAGE privilege on SYSDEFAULTUSERWORKLOAD if it has DATAACCESS, but the db was created with RESTRICTIVE option?