Section Authorities

If requested, SQL/AF will implement a new DB2 security concept, called Section Authorities.

When a database administrator grants the RUN privilege on a package* to a user, that user is able to execute all SQL statements contained in the package. This may be undesirable in some cases (for example with packages whose full functionality should not be available to all users of the package).

When "Section Authorities" have been defined for a given table, users not only require the DB2 RUN privilege on the executed packages, but also table authorities to execute those package sections that access the table.

Section authorities make it easier to restrict access to a given table to one or more named users.

#

* Package is the DB2/VM term for an application program.