Invalid or inoperative packages
In Db2, when a privilege required by a package is revoked, the package is invalidated.
If you use an authorization access control routine, it cannot tell Db2 that a privilege is revoked. Therefore, Db2 cannot know to invalidate the package.
If the revoked privilege was EXECUTE on a user-defined function, Db2 marks the package inoperative instead of invalid.
If a privilege that the package depends on is revoked, and if you want to invalidate the package
or make it inoperative, you must use the SQL GRANT statement to grant the revoked privilege and then
use the REVOKE statement to revoke it. Or, you can set the
AUTHEXIT_CACHEREFRESH system parameter to ALL.
See AUTH EXIT CACHE REFR (AUTHEXIT_CACHEREFRESH subsystem parameter) and
Invalid and inoperative packages for more information.