Revoked System Privlege / Some Object Privlege remains for Public...... Does Public still have any access ?

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

beena - 26 Oct 2007 23:33 GMT

All,
We have revoked all Sytem privleges (BINDADD,
CONNECT,CREATETAB,CREATE_NOT_FENCED,IMPLICT_SCHEMA etc)...from Public.
However Public continues to have select privleges on the system tables
(SYSIBM.*)..
Does this mean Public can some still access the database and query the
database minimally?

Thanks
- beena

Reply to this Message

Serge Rielau - 28 Oct 2007 04:07 GMT

> All,
> We have revoked all Sytem privleges (BINDADD,
[quoted text clipped - 3 lines]
> Does this mean Public can some still access the database and query the
> database minimally?

No. All it means is that anyone who gets past the CONNECT can read the
catalogs. DB2 9 does have a RESTRICT option on CREATE DATABASE btw,
which turn is pretty paranoid.

Cheers
Serge

Signature

Serge Rielau
DB2 Solutions Development
IBM Toronto Lab

Reply to this Message