Processing cache requests

If Db2 is caching the results of RACF access control module requests, it determines if access is granted for reasons other than the ownership of the object by XAPLUCHK.

Db2 indicates that this type of request is being performed by setting XAPLACAC (XAPLFLG2 bit 5) to '1'B. When this bit is on, and XAPLUCHK is an authorization ID, the RACF access control module suppresses the XAPLUCHK ownership check for the object.

Db2 might set XAPLACAC on the following objects and privileges:

• Package (execute)
• UDF (execute)
• Stored procedure (execute)
• Sequence (usage)
• Table (select, insert, delete, update)
• View (select, insert, delete, update)

View ownership checks on insert, delete, and update are performed against the base table of the view. There is no ownership check for the select privilege on a view.