Chapter 3. First steps with DB2 Admin 83
Figure 3-51 VSAM cluster information for table space DSG24D03.GLWS001
3.6 Revoking impact
Before you execute a REVOKE SQL statement, you might want to see what implications this
statement might have.
Revoke impact is a preview function, before the REVOKE statement is
actually executed. The revoke impact report is generated at your request.
As an example, we use this function for revoking some database authorizations from the
userid “PAOLO”. In Figure 3-52 you see the list of all database authorizations that userid
“PAOLO” has.
Figure 3-52 Database authorizations for PAOLO on databases DSG24D0%
DB2 Admin ------------------ TSO LISTCAT Output Display ----------------- 20:42
Command ===> Scroll ===> CSR
********************************* Top of Data **********************************
IDCAMS SYSTEM SERVICES TIME: 20:42:14
CLUSTER ------- DB8AU.DSNDBC.DSG24D03.GLWS001.I0001.A001
IN-CAT --- UCAT.SBOXB2
HISTORY
DATASET-OWNER-------BART CREATION--------2007.053
RELEASE----------------2 EXPIRATION------0000.000
BWO STATUS--------(NULL) BWO TIMESTAMP-----(NULL)
BWO---------------(NULL)
PROTECTION-PSWD-----(NULL) RACF----------------(NO)
ASSOCIATIONS
DATA-----DB8AU.DSNDBD.DSG24D03.GLWS001.I0001.A001
DATA ------- DB8AU.DSNDBD.DSG24D03.GLWS001.I0001.A001
IN-CAT --- UCAT.SBOXB2
HISTORY
DATASET-OWNER-------BART CREATION--------2007.053
RELEASE----------------2 EXPIRATION------0000.000
ACCOUNT-INFO-----------------------------------(NULL)
PROTECTION-PSWD-----(NULL) RACF----------------(NO)
DB2 Admin --------------- DB8A Database Authorizations ------- Row 1 to 2 of 2
Command ===> Scroll ===> CSR
Commands: REVOKE GRANT
Line commands: C C D D D D D I L R R R S S S
R - Revoke GR - Grant D - Database R R B B B I R M O E E E T T T
I - Interpretation E E A C M S O A A O C P A A O
T T D T A P P G D R O A R T P
Database Grant H A S M R I D D E D G V I T S
Sel Grantor Grantee Name Timestamp G B L N B B B R
* * * * * * * * * * * * * * * * * * * *
--- -------- -------- -------- ---------------- - - - - - - - - - - - - - - - -
PAOLOR3 PAOLO DSG24D02 2007-02-28-19.45 S Y Y Y Y Y Y
R PAOLOR3 PAOLO DSG24D03 2007-02-28-19.38 S G G G G G G G G G G G G G G G
******************************* END OF DB2 DATA *******************************
84 DB2 for z/OS Administration Tools for Enhanced Change Management
Entering the R line command gives you the list of privileges the grantee “PAOLO” has, as
shown in Figure 3-53. If you want to keep some of the privileges, you can replace the G with a
blank. If you enter Y in the Report Revoke Impacts field, you request revoke impact analysis.
Figure 3-53 Revoke Database Privileges panel
The report is displayed as a tree structure. At the top of that structure, as shown in
Figure 3-54, you see the authorization that is explicitly being revoked by the statement (level
0). Below that, you see a table privilege and an object, in our sample a view, that would be
lost as a consequence of executing the REVOKE statement.
Figure 3-54 Revoke impact report for PAOLO on database DSG24D03
DB2 Admin --------------- DB8A Revoke Database Privileges --------------- 19:52
Command ===>
REVOKE DB2 SQL ID: PAOLOR3
Enter any character in front of the privilege to revoke it from the user:
G DBADM G CREATETAB G DROP G RECOVERDB G STARTDB
G DBCTRL G CREATETS G IMAGCOPY G REORG G STATS
G DBMAINT G DISPLAYDB G LOAD G REPAIR G STOPDB
ON DATABASE
Database name ===> DSG24D03
FROM
From ===> PAOLO >
BY
By ===>
Report Revoke Impacts ===> YES (Yes/No)
Report Dropped Synonyms & Aliases ===> NO (Yes/No)
DB2 Admin -------------- DB8A Revoke Impact Report ----------- Row 1 to 3 of 3
Command ===> Scroll ===> PAGE
WARNING - You elected not to have dropped Synonyms and Aliases reported.
There may be some dropped Synonyms or Aliases that are not shown here.
Line commands: I - Interpretation
Owner/
S Cscd Grantee Resource Name/ O Schema/ Grantor/ H Privileges/
Lvl K Collection Id T P/K Name Binder G Effect
- ---- -------- ------------------ - -------- -------- - -----------
0 PAOLO DSG24D03 D PAOLOR3 S GGGGGGGGGGGGGGG
1 DSN8810 GLWTDPT T DSG24D03 PAOLO D Y
1 VGLWTEMP V PAOLO DROP
******************************* END OF DB2 DATA *******************************

Get DB2 for z/OS Administration Tools for Enhanced Change Management now with O’Reilly online learning.

O’Reilly members experience live online training, plus books, videos, and digital content from 200+ publishers.