MVSFORUMS.com

Bithead

I have to delete a SYSADM from one of our systems. If I issue a REVOKE for SYSADM on that user, it will have an unwanted cascade effect. What is the best way of removing all user permissions from the catalog without impacting other permissions?

kolusu · Posted: Thu Aug 04, 2005 10:17 am Post subject:

Bithead,

As the per the manual DB2 does not cascade a revoke of SYSADM authority from the installation SYSADM authorization IDs.
Check this link(bottom) which discusses the revoking of SYSADM

http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DSNAGH10/3.2.7.3.4?SHELF=&DT=20010212102121&CASE=

Hope this helps...

Cheers

kolusu
_________________
Kolusu
www.linkedin.com/in/kolusu

Bithead · Posted: Thu Aug 04, 2005 12:00 pm Post subject:

Kolusu,

If I read this correctly, I need to make the userid an Install SysAdm (in the zparm) before I issue the REVOKE and this will pervent the cascade delete. Can you confirm this?

kolusu · Posted: Thu Aug 04, 2005 12:13 pm Post subject:

Bithead · Posted: Thu Aug 04, 2005 12:17 pm Post subject:

Thanks Kolusu.

Bithead · Posted: Tue Aug 09, 2005 1:11 pm Post subject:

Kolusu,

I added the user as Install Sysadm over the weeknd my modifying ZPARM entry for SYSADM and reassembling & linking. I ran a REVOKE SYSADM FROM user BY ALL but it is still hanging up. The DB2 monitor shows many locks on SYSPLAN and SYSPACKAGE which makes me think that the REVOKE is cascading. Any ideas?

kolusu · Posted: Tue Aug 09, 2005 1:26 pm Post subject:

Bithead · Posted: Wed Aug 10, 2005 10:56 am Post subject:

Kolusu,

I tried it in another DB2 instance and it worked fine so it must be something that I did wrong. I will try again.

Thanks again for your help.