Security

Showing 75

Apply security restriction in Db2 table only via database connector tools (but not from database objects)

There are few use cases where Db2 table access must be restricted only from DB connector tools(eg; SPUFI, QMF or DSE in IDz or any other DB visualizer) but not from the database object itself. To explain further, we do have home grown tools(x1) us...

13 days ago in Db2 / Security 0 Submitted

2 VOTE

DB2 LUW : Trusted contexts over IPC

There are many applications where application and DB is co-located in the same server. User impersonation via trusted contexts helps control the access of the database for individual users even though a common technical ID is seeded in application...

4 months ago in Db2 / Security 1 Future consideration

8 VOTE

Remove Group Based Access Limitation

Description of Limitation: IBM has defined a few limitations with role based access which include the following: A role cannot own database objects. Permissions and roles granted to groups are not considered when you create the following database ...

5 months ago in Db2 / Security 1 Submitted

5 VOTE

IBM does not support SSL communications for 2-phase commit (DB2 & MQ)

TS010796788 : DB2 - SSL - Two-Phase commit failures We are mandate to close unsecured connections to DB2 by closing the TCP/IP connections to DB2. However, we are using 2 -phase commit in between MQ and DB2, which looks for TCP channel opened. As ...

5 months ago in Db2 / Security 1 Under review

3 VOTE

Add support for database SINGLE_USER mode access

Time to time there is requirement to be the only user on the database like drop and create database, but there are also users with system authorizations connected to database. Or there is product (even from IBM) like Maximo: https://www.ibm.com/su...

7 months ago in Db2 / Security 0 Not under consideration

5 VOTE

Monitor element, or audit/diagnostic utility, that identifies TLS version of an active DB2 LUW connection (application or session)

We are on the path now to enforcing TLS 1.2 for all SSL at my company. To make it easier for developers, at this point we have enabled TLS 1.2 but are continuing to allow TLS 1.0 and 1.1 database connections. We are hesitant to simply disable TLS ...

12 months ago in Db2 / Security 0 Future consideration

7 VOTE

Enable db2 to use SVCENAME only as a resync port, not allowing connections to this port

We expect that credentials are properly secured on the network. Db2 LUW will allow part of these credentials to be not properly secured in certain situations. Due to this, we need to convert all of our connections to be SSL connections. But in the...

about 1 year ago in Db2 / Security 0 Future consideration

2 VOTE

Restrict access of non system data by instance owner

We manage many database systems however as a service provider we do not want the ability to access customer data unless a customer enables this access to us. This should be set at the time of database creation and should not be something that can ...

over 1 year ago in Db2 / Security 0 Future consideration

7 VOTE

schema-privilege for USAGE ON SEQUENCE

To GRANT USAGE ON SEQUENCE there is only the old method with db2 grant usage on sequence sq_test to role <rolename> But i want to use schema-privileges, but there is not the function GRANT USAGEIN ON SCHEMA MYSCHEMA TO ROLE <rolename> ...

over 1 year ago in Db2 / Security 0 Future consideration

1 VOTE

Revoke on function blocked by depended objects.

The revoke on a function is being blocked due to dependent on the target object. revoke EXECUTE ON FUNCTION "xyz"."aaaaaa"(DATE) from PUBLIC SQL0478N The statement failed because one or more dependencies exist on the target object. Target object t...

almost 2 years ago in Db2 / Security 0 Future consideration

Please enter your email address

FILTER BY CATEGORY