Securing database files

You can secure database files in various ways.

Granting file and data authority
Db2® for i provides several methods to grant file and data authority.
Specifying public authority
Public authority is given to users who do not have any specific authority to an object, who are not on the authorization list of the object, or whose group profile has no specific authority to the object. When you create a file, you can specify and grant public authority.
Using database file capabilities to control I/O operations
When you create a physical file, you can specify that the file capabilities control which input/output (I/O) operations are allowed for the file, independent of database file authority.
Limiting access to specific fields in a database file
You can restrict update and read requests to the specific fields in a database file.
Using logical files to secure data
You can use logical files to prevent data in physical files from being read or changed.
Using permissions and masks to secure data
You can use permissions and masks to prevent data from being accessed.

Parent topic: Setting up database files

Related concepts