Security model

Net Search Extender and Db2® Text Search have different security model implementations. Therefore, it is important to be aware of the differences between the two.

With Net Search Extender, when an administrative command is executed, after initial privilege checks for the user connecting to the database, control is switched to the instance owner and further on the privileges of the instance owner are used. The database instance owner is required to have DBADM with DATAACCESS privileges. In addition, the fenced user must be in the same group as the instance owner.

Db2 Text Search does not require these settings anymore. However, as long as a database in the instance is enabled for Net Search Extender these prerequisites must be met.

As part of the migration preparation, make sure to review the Db2 Text Search security model and assign the text search administrator and text search manager roles as needed.