AUTH_COMPATIBILITY in macro DSN6SPRM
The AUTH_COMPATIBILITY parameter specifies whether Db2 uses the authorization rules of the Db2 12 release, or previous Db2 releases, for specific Db2 operations.
This subsystem parameter is new in Db2 12. It can be set at any function level, but it takes effect only after activation of function level 500 or higher.
| Acceptable values: | blank, SELECT_FOR_UNLOAD |
|---|---|
| Default: | blank |
| DSNZPxxx: | DSN6SPRM AUTH_COMPATIBILITY |
| Security parameter: | Yes |
- Null (blank)
- Indicates that AUTH_COMPATIBILITY has no effect and that there is no authorization check override, and Db2 uses the authorization rules of the Db2 12 release. That is, Db2 uses the following authorization rules:
- SELECT authority for the unloaded table is not sufficient for running the UNLOAD utility. To temporarily revert this rule, use SELECT_FOR_UNLOAD.
- SELECT_FOR_UNLOAD
- When this value is specified, the UNLOAD utility checks if the user has the SELECT or UNLOAD privilege on the target table. If this value is not specified, the UNLOAD utility checks if the user has the UNLOAD privilege on the target table. For more information, see
Changes to the authorization check of the UNLOAD utility
in Security release incompatibilities.