When access control authorization routine is taken

Db2 can take the access control authorization routine when it starts up, shuts down, or performs an authorization check on a privilege.

The access control authorization routine is taken in the following three instances:

At Db2 startup

This exit routine is taken when Db2 starts to allow the external authorization checking application to perform any required setup prior to authorization checking. For example, loading authorization profiles into storage is a required setup task. Db2 uses the reason code that the exit routine sets during startup to determine how to handle exception situations.

When an authorization check is to be performed on a privilege

This exit routine is taken when Db2 accesses security tables in the catalog to check authorization on a privilege. The exit routine is taken only if none of the prior invocations have indicated that the exit routine must not be called again.

At Db2 shutdown

This exit routine is taken when Db2 is stopping, to let the external authorization checking application perform its cleanup before Db2 stops.