Limited support BMC provides limited support for this version of the product. As a result, BMC no longer accepts comments in this space. If you encounter problems with the product version or the space, contact BMC Support.BMC recommends upgrading to the latest version of the product. To see documentation for that version, see ALTER and BMC AMI Change Manager for Db2 13.1.

Authorization switching function

The Execution component performs an authorization switching function to ensure that Db2 structures are created with the proper owner and creator.

To secure this function, restrict the EXECUTE authority on the Execution Main plan, use the Execution security exit, or do both.

You might want to switch authorizations during the execution of a worklist for the following reasons:

  • To create Db2 objects with the proper owner.
  • To create Db2 objects with the proper creator (the Db2 catalog CREATEDBY field).
  • To obtain the necessary authorizations for performing a particular task.

Execution provides commands and operational modes for controlling authorizations. The following parameters or keywords determine which commands and modes are used:

  • AUTHSW parameter in the installation options module.
  • AUTHSW, NOAUTHSW, AUTHSWGLID, and AUTHSWOFF keywords in the ALUIN input stream.

The user who executes the worklist might not have the necessary authorizations for all of the actions that occur in the worklist. To solve this problem, you can specify a global authorization ID (GLID) to execute the worklist.

This section contains the following topics:

Related topic

Default-processing-options-overrides

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*