DB2 9 & 10 for z/OS Overview

Migration Planning WorkshopRow and Column level access …• Define a column or row policy based on who isaccessing the table– SESSION-USER• Primary authorization ID of the process– CURRENT SQLID• SQL authorization ID of the process• SET CURRENT SQLID = some authorization id– VERIFY_GROUP_FOR_USER (new BIF)• Get authorization IDs for the value in SESSION_USER– Gets both primary and secondary auth ids– Return 1 if any of those auth IDs are in the argument– VERIFY_ROLE_FOR_USER (new BIF)• Get the role for the value in SESSION_USER• Return 1 if the role is in the argument list139© 2011 IBM Corporation