Generating and running REVOKE DCL statements
Before you begin
You must have the required Db2 privileges.
To generate and run a REVOKE DCL statement
In the DB2 Navigator perspective, select one or more of the supported objects.
For more information, see Navigating to an object.On the Tasks toolbar, click Revoke
.The Revoke <object> Privileges dialog box is displayed.
On the Auth Names tab, use the following buttons to add users and roles:
- Add Authorization Id
- Add Role
On the Privileges tab, select one or more object privileges to revoke from the added users and roles.
Only the object privileges related to the selected object are displayed.- (Optional) To include the BY clause, in the Granted By field, enter the granting user ID.
(Optional) To include the INCLUDING DEPENDENT clause, select one of the following values from the Include deps list:
Value Description Not selected value Might add INCLUDING DEPENDENT PRIVILEGES clause to the generated REVOKE DCL statement, depending on the value of the DSNZPARM PRIVILEGE_DEPS INCLUDING DEPENDENT PRIVILEGES Adds the INCLUDING DEPENDENT PRIVILEGES clause to the generated REVOKE DCL statement NOT INCLUDING DEPENDENT PRIVILEGES Adds the NOT INCLUDING DEPENDENT PRIVILEGES clause to the generated REVOKE DCL statement On the Object List tab, you can review the objects from which you are revoking the users' and roles' privileges.
- Click Generate DCL.
The Revoke DCL statement is displayed in the Scratchpad perspective. Click Run
to run the Revoke DCL statement.- (Optional) To save the Revoke DCL statement, perform the following steps:
Click Save
.In the File name field, enter an existing data set name.
Click OK.