DB2 Authorization Control—GRANTs/REVOKEs report (AUDGRV)
The DB2 Authorization Control—GRANTs/REVOKEs report (AUDGRV) provides data on all GRANT and REVOKE statements for each authorization ID and plan. The following figure shows a sample of the AUDGRV report.
REPORT: AUDGRV REPORT DATE: 2000-05-25 19.25.28
SYSTEM - SYSB
SUBSYSTEM - DB2E
GRANTOR/ STMT OBJECT GRANT RETURN
AUTHID PLAN DATE TIME REVOKER TYPE TYPE REASON CODE SQL TEXT
------ -------- ------ ------ --------- ------ ---------- ------- ------- ---------------------------
CJN1 DSNESPRR 2000-05-08 13.35.32 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 13.35.58 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 13.36.21 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 13.36.51 CJN1 GRANT TABLE/VIEW UNKNOWN 0 GRANT SELECT ON TABLE CJN1.CJNAUDML
CJN1 DSNESPRR 2000-05-08 13.37.38 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 13.38.37 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 13.39.45 CJN1 GRANT TABLE/VIEW UNKNOWN 0 GRANT SELECT ON TABLE CJN1.CJNAUSUM
CJN1 DSNESPRR 2000-05-08 13.40.10 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 14.35.44 CJN1 GRANT TABLE/VIEW UNKNOWN 0 GRANT INSERT ON TABLE CJN1.CJNAUDMB
CJN1 DSNESPRR 2000-05-08 16.54.54 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 16.55.22 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 16.55.42 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 16.56.21 CJN1 GRANT TABLE/VIEW UNKNOWN 0 GRANT SELECT ON TABLE CJN1.CJNAUDML
CJN1 DSNESPRR 2000-05-08 16.56.36 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 16.56.51 CJN1 GRANT TABLE/VIEW UNKNOWN 0
CJN1 DSNESPRR 2000-05-08 16.57.15 CJN1 GRANT TABLE/VIEW UNKNOWN 0 GRANT SELECT ON TABLE CJN1.CJNAUSUM
CJN1 DSNESPRR 2000-05-08 16.57.34 CJN1 GRANT TABLE/VIEW UNKNOWN 0
ELC2 MXZAPPL 2000-05-08 17.26.16 ELC2 REVOKE TABLE/VIEW TABLE/VI -1 REVOKE SELECT ON TABLE JOYCE.SITE , JOYCE.PRODUCT
ELC2 MXZAPPL 2000-05-08 17.26.16 ELC2 REVOKE APPL PLAN APPL PLA -1 REVOKE EXECUTE ON PLAN MXZAPPL FROM ELC2
ELC2 MXZAPPL 2000-05-08 17.26.17 ELC2 GRANT TABLE/VIEW DBADM 0 GRANT SELECT ON TABLE JOYCE.SITE , JOYCE.PRODUCT ,
ELC2 MXZAPPL 2000-05-08 17.26.17 ELC2 GRANT APPL PLAN UNKNOWN 0 GRANT EXECUTE ON PLAN MXZAPPL TO ELC1
ELC2 MXZAPPL 2000-05-08 17.26.34 ELC2 REVOKE TABLE/VIEW TABLE/VI 0 REVOKE SELECT ON TABLE JOYCE.SITE , JOYCE.PRODUCT
ELC2 MXZAPPL 2000-05-08 17.26.34 ELC2 REVOKE APPL PLAN APPL PLA 0 REVOKE EXECUTE ON PLAN MXZAPPL FROM ELC1
ELC2 MXZAPPL 2000-05-08 17.26.42 ELC2 GRANT TABLE/VIEW UNKNOWN -1 GRANT SELECT ON TABLE JOYCE.SITE,JOYCE.PRODUCT
ELC2 MXZAPPL 2000-05-08 17.26.42 ELC2 GRANT APPL PLAN UNKNOWN -1 GRANT EXECUTE ON PLAN MXZAPPL TO ELC2
The report data is sorted by both AUTHID and PLAN (default). The following table describes the columns on the report.
Column | Description |
|---|---|
AUTHID | Authorization ID of the user accessing this DB2 system |
PLAN | Plan name of the application program, transaction, or utility executed |
DATE | Date of the GRANT or REVOKE operation |
TIME | Time of the GRANT or REVOKE operation |
GRANTOR/REVOKER | Authorization ID of the user issuing the GRANT or REVOKE |
STMT TYPE | Statement type--either GRANT or REVOKE |
OBJECT TYPE | DB2 object type of the GRANT or REVOKE, such as BUFFERPOOL, PLAN, or TABLESPACE |
GRANT REASON | Authorization level of the grantor: SYSADM, SYSCTRL, SYSOPR, DBADM, DBCTRL, or DBMAINT |
RETURN CODE | SQL return code from the GRANT / REVOKE operation |
SQL TEXT | Beginning of the text of the GRANT or REVOKE statement |
Related topic