Results 1 to 8 of 8
  1. #1
    Join Date
    Jan 2012
    Posts
    82

    Unanswered: Stupid DB2 privileges Issue

    So I am getting an annoying error in db2.

    Basically to give some super users direct read access to the db we have created a group named APVIEWER. And we gave it select rights on all tables and views of the DB except the SYS schemas .


    We have added users to the group in our linux environment.

    Now the issue that users are facing is that they are getting access errors on certain objects. Not all just a few objects in the DB. We have checked and the group does have select rights on the group but we are still getting the error. and some users in the group get it some times and others don't .. So this doesn't make sense at all...


    I have checked everything and I have reached a brick wall .. Anybody else have any ideas...??? The error that the user sometimes get is


    BIC00004. DAL01008. An error occurred while accessing the database.
    [IBM][CLI Driver][DB2/LINUXZ64] SQL0551N "AJAFRI" does not have the required authorization or privilege to perform operation "SELECT" on object "APP.DATE_DIM". SQLSTATE=42501

  2. #2
    Join Date
    Sep 2012
    Posts
    177
    Did you give the privilege to the user to accessing the database?

    Thanks,
    laxman..

  3. #3
    Join Date
    Aug 2008
    Posts
    147
    Have tables been created after you set the rights? and maybe the select privileges haven't been set for those users
    ---------------------------------
    www.sqlserver-dba.com
    www.dba-db2.com

  4. #4
    Join Date
    Apr 2006
    Location
    Belgium
    Posts
    2,514
    Provided Answers: 11
    check sysibm.systabauth
    Best Regards, Guy Przytula
    Database Software Consultant
    Good DBAs are not formed in a week or a month. They are created little by little, day by day. Protracted and patient effort is needed to develop good DBAs.
    Spoon feeding : To treat (another) in a way that discourages independent thought or action, as by overindulgence.
    DB2 UDB LUW Certified V7-V8-V9-V9.7-V10.1-V10.5 DB Admin - Advanced DBA -Dprop..
    Information Server Datastage Certified
    http://www.infocura.be

  5. #5
    Join Date
    Jan 2012
    Posts
    82
    No the user does not have access to that table.

    A group has select access to that table and the user has been placed in that group

    No the table was not created after the privileges were granted.


    and I have checked syscat.tabauth and the group does have select on the table and the user is added to that group... still getting the error..

  6. #6
    Join Date
    Apr 2008
    Location
    Iasi, Romania
    Posts
    561
    Provided Answers: 2
    Maybe APP.DATE_DIM is a view.
    Florin Aparaschivei
    DB2 9.7, 10.5 on Windows
    Iasi, Romania

  7. #7
    Join Date
    Aug 2008
    Location
    Toronto, Canada
    Posts
    2,367
    Quote Originally Posted by junaid377 View Post
    some users in the group get it some times and others don't .. So this doesn't make sense at all...
    Are they getting the same error when logged in/selecting locally on the server? Is it possible that some users belong to some additional groups and getting select privilege through another group or role?


    If some users are able to select and others don't (assuming all users are part of group APVIEWER) and it sometimes work and other times don't, then open a pmr.

  8. #8
    Join Date
    Apr 2007
    Location
    Chicago
    Posts
    68
    If you're submitting dynamic SQL from stored procs, take a look at DYNAMICRULES.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •