DDL data retrieved from IFCID 142 or 271
This topic shows a sample and the field description of DDL data retrieved from IFCID 142 or 271.
If the data is retrieved from IFCID 142 , ...
If you select DDL and the data is retrieved from IFCID 142 and the following fields are printed:TABLE NAME: AUDTB1 OWNER : JUB CREATOR: JUB
DATABASE : 274 TABLE OBID: 3 TYPE : CREATE
OWNER TYPE: PRIM/SECOND AUTHID SECLABEL : XXXXXXXX MLS : XXXX
R/C ACCESS CTRL: COLUMN
TEXT: CREATE TABLE JUB.AUDTB1 (IDCOLUMN INTEGER GENERATED ALWAYS
AS IDENTITY, NNAME VARCHAR(50) NOT NULL, VNAME CHAR(10) NOT
NULL, ANZAHL INTEGER NOT NULL) AUDIT ALL IN AUDDB1.AUDTS1
- TABLE NAME
- The name of the audited DB2® table.
- OWNER
- The authorization ID of the owner of the audited DB2 table.
- CREATOR
- The authorization ID of the creator of the DB2 table.
- DATABASE
- Either the name or the decimal DBID of the database that contains the auditable DB2 table. The name is printed if known, otherwise OMEGAMON® for Db2 PE reports a decimal DBID.
- TABLE OBID
- The object identifier (OBID) of the auditable table associated with the access.
- TYPE
- The statement type. Possible values are:
- CREATE
- DROP
- ALTER
- OWNER TYPE
- The type of the table owner. Possible values are:
- ROLE
- A role is used.
- PRIM/SECOND AUTHID
- The user ID of the primary or the secondary authorization ID is used.
- N/P
- A blank is shown in the performance database.
- N/A
- A blank is shown in the performance database.
- SECLABEL
- The security label of the user.
- MLS
- The Multilevel Security (MLS) table can contain the following
values:
- Y
- For a Create or Drop operation of a table that has multilevel security, or for an Alter operation of a table to add a security label column.
- N
- For an Alter operation of a table that has multilevel security.
- NONE
- The table does not have multilevel security.
- N/P
- Not present. A blank is shown in the performance database.
- N/A
- A blank is shown in the performance database.
- R/C ACCESS CTRL
- The access control field contains data about ROW-LEVEL and COLUMN-LEVEL
(R/C) ACCESS CONTROL in DDL. It can have the following values:
- 'R' (ROW)
- Activates row-level access control.
- 'C' (COLUMN)
- Activates column-level access control.
- 'B' (BOTH)
- Activates row-level and column-level access control.
- ' ' (NO)
- Activates no access control.
- TEXT
- The SQL statement text associated with the table access. Long SQL text can be truncated.
If the data is retrieved from IFCID 271, ...
If you select DDL and the data is retrieved from IFCID 271, the following fields are printed:TYPE DETAIL
-------- ------------------------------------------------------------
DDL CHANGE TYPE: CREATE OBJECT: ROW PERMISSION SQLCODE: XXXX
TEXT: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
xxxxxxxxxxxxxxxxxxxx
- CHANGE TYPE
- Identifies the SQL statement type:
- CREATE or C
- Creates row permission or column mask.
- DROP or D
- Drops row permission or column mask.
- ALTER or A
- Alters row permission or column mask.
- OBJECT
- Identifies the object type:
- Row permission (R)
- Column mask (M)
- SQLCODE
- The SQL code from the execution of the CREATE, DROP, or ALTER statement.
- TEXT
- The SQL statement text associated with the table access. The maximum length is 4000 bytes. Long SQL text can be truncated.