Topic
  • 3 replies
  • Latest Post - ‏2012-02-02T08:46:56Z by cjs1976
cjs1976
cjs1976
3 Posts

Pinned topic Quest about user rights.

‏2012-01-30T16:06:10Z |
Hi!

I tried the DB2 Express-C for the first time. I use a Windows XP machine for my test. I created a special user, only with the db2users group, as in the documentation described.

Problem: The user can connect to the DB2 Express-C and can make everything!

I tried to use the DB2 commandcenter to remove ALL rights for this user, but the user can still do everything!?

Please can anyone tell where is my mistake?

Thanks,
Christian.
Updated on 2012-02-02T08:46:56Z at 2012-02-02T08:46:56Z by cjs1976
  • SystemAdmin
    SystemAdmin
    5837 Posts

    Re: Quest about user rights.

    ‏2012-01-30T16:19:15Z  
    does this user by any chance belongs to the db2admins group as well?
    is this user a local administrator on the windows machine?
  • cjs1976
    cjs1976
    3 Posts

    Re: Quest about user rights.

    ‏2012-02-02T08:46:20Z  
    Hi!

    I tried a completly new Windows XP with all available Updates. I installed the newest version of DB2 Express-C with the default values. I only entered a password for the administrator account.

    After that, I created a user account (simple, not administrator) on the Windows XP machine, and I give it the DB2USERS group. So the account is in the groups USERS and DB2USERS.

    I connected to the DB2 over the commandcenter, and created a database (default values). Then I set the user rights for the user christian (see screenshots).

    After that, I connected with the SQuirreL SQL Client to the server and the new database with the user christian. Worked fine!

    Then I sent the simple SQL command 'create table employee (Empno smallint, Name varchar(30))', and it worked! Now I have a table EMPLOYEE with the schema CHRISTIAN under the tablespace USERSPACE1.

    I think, the user christian has no rights to create a new table. But I also think, I have an understanding problem with the database->table->schema->tablespace system of DB2 Express-C.

    I use MySQL a this time, and there I have databases and users. And I can define which user can connect and from where, and what he can do in the different databases.

    Greetings,
    Christian.
  • cjs1976
    cjs1976
    3 Posts

    Re: Quest about user rights.

    ‏2012-02-02T08:46:56Z  
    Here the second screenshot...