-
Notifications
You must be signed in to change notification settings - Fork 13
Description
This extension has capability for generating DDL for a Db2 object.
Why does it require SYSADM authority or MONITOR1 authority?
https://ibm.github.io/db2forzosdeveloperextension-about/docs/the-basics/generating-ddl.html
This authority requirement seems excessive. This type of authority is given out to most users of Db2 such as developers or application DBAS. But these are the people who want to occasionally generate DDL
Other tools, such as ISPF based IBM Admin Tool for Db2 and BMC ADMIN Tool for Db2 will generate DDL very easily. I assume the only authority required is select permission on the appropriate db2 catalog tables.
Also, IBM Data Studio can generate DDL. Again, the user only needs access to the db2 catalog.
OF all the tools in the world that generate DDL... I have never seen the requirement for SYSADM or MONITOR1.
Finally, I have a memory of being able to see DDL of some Db2 objects. Perhaps it was an earlier version of this extension that had a lighter requirement? Did the permission requirement change?
thanks
Brian Laube