"Any table" privilege

Db2 checks the "any table" privilege for the DESCRIBE TABLE statement.

In Db2, the UPDATE privilege or the REFERENCES privilege for a specific column is sufficient to allow the "any table" privilege. However, when the RACF access control module is invoked, the UPDATE or REFERENCES privilege for a specific column is not sufficient to provide users with the "any table" privilege. The UPDATE or REFERENCES privilege has to be held on the table to allow the "any table" privilege.