IBM Data Platform Ideas Portal for Customers


This portal is to open public enhancement requests against products and services offered by the IBM Data Platform organization. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:


Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,


Post your ideas

Post ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,

  1. Post an idea

  2. Upvote ideas that matter most to you

  3. Get feedback from the IBM team to refine your idea


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

IBM Employees should enter Ideas at https://ideas.ibm.com



Add a new idea Subscribe
Status Planned for future release
Workspace Db2
Components Db2 Warehouse
Created by Guest
Created on Nov 25, 2025

RELATED IDEAS

Disable default WITH GRANT OPTION privileges on user-created objects

Currenty on Db2 LUW / Datawarehouse version 12.1 if an end user has CREATEIN privileges on a schema by a role (Role Based Access Control) then the user gets 7 implicit privileges on that newly created object, WITH GRANT OPTION. The end user can now grant privileges on that new object to everyone who has access to the Db2 Database (even PUBLIC is possible). We would like to enforce privileges by roles only, so all access on objects in a schema is only possible if the end user has the correct privileges by a role granted on that schema. Currently, Role Based Access Control can not be enforced since the user who created the object can grant privileges outside the roles also.

We would want that if new objects are created by an end user (all users other than system or database privileged users like db2inst1, dbadm, secadm, etc.) the end users do not get the WITH GRANT OPTION by default on these new objects because they are the creator or owner of the new objects. This way all privileges will be enforced by Db2 roles (100% Role Based Access Control).

I also have attached a pptx slide to explain the privilege issue based on a use case.

2025-10-29 DSP ...
2025-10-29 DSP data isolation - grants - feature request.pptx
 2025-10-29 DSP data isolation - grants - feature request.pptx
Open full size
Needed By Month
  • Admin
    Siji Daniel
    May 21, 2026

    Acknowledging your comment. We will review this request with what we are developing.

    Reply
  • Guest
    Apr 22, 2026

    I have one addition to this feature request to prevent performance issues. Since CONTROL privilege will also be removed on e.g. the tables it is not possible anymore for the users who created the tables to execute RUNSTATS statements on the table. When implementing this feature request please also implement a possibility or privilege (e.g. SELECT privilege on table is enough to execute RUNSTATS) so users who created and added data into the table can also execute RUNSTATS to prevent system performance issues because of missing or incorrect statistics.

    Reply
  • Admin
    Siji Daniel
    Mar 6, 2026

    Thank you for submitting your request. This has been identified as a candidate for a future release. We will update this Idea after it has been delivered.

    Reply
  • Admin
    Siji Daniel
    Nov 28, 2025

    Thank you for submitting your request. We are reviewing this. Please expect an update in the portal within 90 days.
    Thank you.

    Reply

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.