SEO

#1 (**permalink**) 02-27-2008, 11:49 AM

Does a revoke post an entry in the DB2 catalog that would allow an
query of the number of revokes by someone? Or does the revoke just
delete the grant and leave no record in the catlalog? I am on DB2 V8
for Z/OS.

#2 (**permalink**) 02-27-2008, 11:49 AM

Huskerdoo wrote:
> Does a revoke post an entry in the DB2 catalog that would allow an
> query of the number of revokes by someone? Or does the revoke just
> delete the grant and leave no record in the catlalog? I am on DB2 V8
> for Z/OS.
>
It wouldn't be in the catalogs. Check out DB2 zOS's _auditing_ capabilities.

--
Serge Rielau
DB2 Solutions Development
IBM Toronto Lab

#3 (**permalink**) 02-27-2008, 11:49 AM

Huskerdoo wrote:

> Does a revoke post an entry in the DB2 catalog that would allow an
> query of the number of revokes by someone? Or does the revoke just
> delete the grant and leave no record in the catlalog? I am on DB2 V8
> for Z/OS.

A revoke just removes the entry in the catalog. Unless you are using an
event monitor (not sure if it is available on DB2 for z/OS) or some other
audit facility, I don't think you have access to details on when a revoke
happened.

--
Knut Stolze
DB2 z/OS Utilities Development
IBM Germany

Thread Tools
Show Printable Version Email this Page
Display Modes
Linear Mode Switch to Hybrid Mode Switch to Threaded Mode

SEO

Tracking Revokes