Authorization

Edit online

The SQL services described in this section are implemented using several service programs. Changing the authority on one of these service programs will affect all the services that are part of that service program.

Authority can be changed using the GRTOBJAUT CL command on the *SRVPGM or the SQL GRANT statement on any procedure or function that uses the service program.

To access the services, a user needs at least *OBJOPR and *EXECUTE authority on the service program or the EXECUTE SQL privilege on the procedure or function. Some services may have additional authority requirements, such as special authority or function usage, as described in the documentation for each service.

The services are associated with the following service programs:
Configure Db2® Mirror replication: QSYS/QMRDBSSDBA *SRVPGM
Shipped with *PUBLIC *EXCLUDE authority.
Configure Db2 Mirror product: QSYS/QMRDBSSPRD *SRVPGM
Shipped with *PUBLIC *EXCLUDE authority.
Review Db2 Mirror details: QSYS/QMRDBSSRTU *SRVPGM
Shipped with *PUBLIC *USE authority.
Review Db2 Mirror details: QSYS/QMRDBSSRTV *SRVPGM
Shipped with *PUBLIC *USE authority.
Configure Db2 Mirror communication: QSYS/QMRDBSSNRG *SRVPGM and QSYS/QTOCNRGRP *SRVPGM
Shipped with *PUBLIC *EXCLUDE authority.
Configure Db2 Mirror resynchronization: QSYS/QDBSRVIO1 *SRVPGM
Shipped with *PUBLIC *USE authority.
Work with Db2 Mirror object details: QSYS/QMRDBSSOBJ *SRVPGM
Shipped with *PUBLIC *EXCLUDE authority.
Start of changeReturn Db2 Mirror audit journal information: QSYS2/MIRRORDJTS *SRVPGMEnd of change
Start of change
Shipped with *PUBLIC *USE authority.
End of change
To see which users have authority to configure the Db2 Mirror product, you can run this query:
SELECT AUTHORIZATION_NAME
  FROM QSYS2.OBJECT_PRIVILEGES
    WHERE
        SYSTEM_OBJECT_SCHEMA = 'QSYS' AND
        SYSTEM_OBJECT_NAME   = 'QMRDBSSPRD' AND
        OBJECT_TYPE          = '*SRVPGM' AND
        OBJECT_OPERATIONAL   = 'YES' AND     
        DATA_EXECUTE         = 'YES';