Skip to content

Too much permission required for generate DDL #260

@BrianL674

Description

@BrianL674

This extension has capability for generating DDL for a Db2 object.

Why does it require SYSADM authority or MONITOR1 authority?
https://ibm.github.io/db2forzosdeveloperextension-about/docs/the-basics/generating-ddl.html

This authority requirement seems excessive. This type of authority is given out to most users of Db2 such as developers or application DBAS. But these are the people who want to occasionally generate DDL

Other tools, such as ISPF based IBM Admin Tool for Db2 and BMC ADMIN Tool for Db2 will generate DDL very easily. I assume the only authority required is select permission on the appropriate db2 catalog tables.
Also, IBM Data Studio can generate DDL. Again, the user only needs access to the db2 catalog.

OF all the tools in the world that generate DDL... I have never seen the requirement for SYSADM or MONITOR1.

Finally, I have a memory of being able to see DDL of some Db2 objects. Perhaps it was an earlier version of this extension that had a lighter requirement? Did the permission requirement change?

thanks
Brian Laube

Metadata

Metadata

Assignees

No one assigned

    Labels

    enhancementNew feature or request

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions