Home Page for the TeradataForum
 

Archives of the TeradataForum

Message Posted: Tue, 06 Dec 2005 @ 21:03:57 GMT


     
  <Prev Next>   <<First <Prev Next> Last>>  


Subj:   Re: EXPLAIN rights
 
From:   Anomy Anom

<-- Anonymously Posted: Tuesday, December 06, 2005 15:15 -->

  Not true. As the DB2 manual for EXPLAIN statement says:  


  Authorization  


  The authorization rules are those defined for the SQL statement specified in the EXPLAIN statement. For example, if a DELETE statement is used as the explainable-sql-statement, the authorization rules for the DELETE statement are applied when the DELETE statement is explained.<SNIP>  


Point taken. Thank you for the correction.

I left the DB2 world 3 years ago after working with it since 1991 using COBOL/DB2/CICS. It has been a while since I had the privilege to use RACF and TSO, but in those 12 years writing COBOL with embedded SQL I do not recall ever having to use a special ID or bothering anyone to get an EXPLAIN statement executed to ensure the query was using the desired indexes and review the plan of access.

Many of my EXPLAINS had access to tables I could not even browse from other systems (like SECURITY or USER) and yet my EXPLAIN statements always worked. It is from those experiences that I derived the assertiveness of my earlier statement on DB2's ability to do an EXPLAIN w/o the need to obtain a security clearance.

Whatever magic we had in those 3 customer sites that enabled me to do my job as a developer is the same magic I want from Teradata in my shop to enable my developers to do their job without my involvement.

Granting rights is not an option because as someone wrote earlier, if they forget to use the EXPLAIN word, it could mess things up something fierce.

Developing our own tool would be nice but we do not have the know-how or personnel to make it seamless and 100% secure in a short period of time.

I think the suggestion for me to present it as an enhancement could be made and let the company (NCR) decide what they want to do.

Now, does anyone know how to submit the request?


Thanks,

Anonym



     
  <Prev Next>   <<First <Prev Next> Last>>  
 
 
 
 
 
 
 
 
  
  Top Home Privacy Feedback  
 
 
Copyright for the TeradataForum (TDATA-L), Manta BlueSky    
Copyright 2016 - All Rights Reserved    
Last Modified: 15 Jun 2023