Additional operations

A number of considerations must be reviewed creating permissions or masks for a table.

Adding application profile to permissions and masks
Some existing applications might need to add the profile of the job running the application to the permissions and masks of the base table.
Reclaim Storage
After completing a Reclaim Storage (RCLSTG), any data spaces that are orphaned and found by the reclaim storage operation are added to the QRCL library as a table.
Query Reports
This recommendation applies to query report writer functions such as Query for i or DB2 for i Query Manager.
MQTs
When populating or refreshing an MQT, it does not account for any predicates or expressions from masks or permissions on dependent tables.
Temporal tables
A system-period temporal table can have a row permission or a column mask.
Group Profiles and QIBM_DB_SECADM
Authorization IDs that are authorized to the QIBM_DB_SECADM function should not be added to a group profile.
Copy File (CPYF) parameters
The Copy File (CPYF) command can compare returned values from the FROMFILE TOKEY, INCCHAR and INCREL parameters.
OmniFind Text Search Server for DB2 for i
The OmniFind Text Search Server for DB2® for i (5733-OMF) version 1.3 or higher allows customers to create a text search index over a column of a table that is protected by RCAC.

Parent topic: Best practices when using permissions and masks