Checking authorization for executing an RRSAF application without a plan

RRSAF provides the capability for an application to connect to Db2 and run without a Db2 plan.

About this task

If an RRSAF application does not have a plan, the following authorization rules are true:

  • For the following types of packages, the primary or secondary authorization ID and role of the process are used for checking authorization to execute the package:
    • A local package
    • A remote package that is on a Db2 for z/OS® system and is accessed using DRDA
  • At a Db2 for z/OS system, the authorization to execute the DESCRIBE TABLE statement includes checking the primary and secondary authorization IDs.
  • For a double hop situation, the authorization ID that must hold the required privileges to execute SQL statements at the second server is determined as if the requester is not a Db2 for z/OS system.