Generating and running REVOKE DCL statements


(BMC.DB2.SPE2510)

You can use BMC AMI Command Center to generate and run a REVOKE DCL statement for the following objects:

  • Tables
  • Views.

Before you begin

You must have the required Db2 privileges.

To generate and run a REVOKE DCL statement

  1. In the DB2 Navigator perspective, select one or more of the supported objects.
    For more information, see Navigating to an object.

  2. On the Tasks toolbar, click Revoke NG_Gen_Revoke.png.

    Success

    Tip

    You can also right-click a selected object and select Revoke from the menu.

    The Revoke <object> Privileges dialog box is displayed.

  3. On the Auth Names tab, use the following buttons to add users and roles:

    • Add Authorization Id
    • Add Role
  4. On the Privileges tab, select one or more object privileges to revoke from the added users and roles.
    Only the object privileges related to the selected object are displayed.

  5. (Optional) To include the BY clause, in the Granted By field, enter the granting user ID.
  6. (Optional) To include the INCLUDING DEPENDENT clause, select one of the following values from the Include deps list:

    ValueDescription
    Not selected valueMight add INCLUDING DEPENDENT PRIVILEGES clause to the generated REVOKE DCL statement, depending on the value of the DSNZPARM PRIVILEGE_DEPS
    INCLUDING DEPENDENT PRIVILEGESAdds the INCLUDING DEPENDENT PRIVILEGES clause to the generated REVOKE DCL statement
    NOT INCLUDING DEPENDENT PRIVILEGESAdds the NOT INCLUDING DEPENDENT PRIVILEGES clause to the generated REVOKE DCL statement
    Warning
    Important

    The Include deps list is enabled if the DSNZPARM PRIVILEGE_INCLUDE_DEPS is set to SQLSTMT. The Include deps list is disabled if the DSNZPARM PRIVILEGE_INCLUDE_DEPS is set to YES or NO.

  7. On the Object List tab, you can review the objects from which you are revoking the users' and roles' privileges.

  8. Click Generate DCL.
    The Revoke DCL statement is displayed in the Scratchpad perspective.
  9. Click Run NW_run.png to run the Revoke DCL statement.

  10. (Optional) To save the Revoke DCL statement, perform the following steps:
    1.  Click Save Save.

    2. In the File name field, enter an existing data set name.

    3. Click OK.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC AMI Command Center for Db2 13.2