bldibmsec - Create Security Objects in an IBM DB2 Database

bldibmsec [-UDVq] [-u DbLoginName] [-p Password] DataArea [DatabaseService]

Checks the Lawson User Security definition to see which users have access to which tables and generates SQL grant/revoke permission statements based on the dictionary.

If your system uses Lawson Security and Resource Management, and you have USE_CFG_FILE and USE_PRIVILEGED_ID specified for a database service login method, do not use the bldibmsec utility for that database service.

Option Description
u DbLoginName The database user login.
p Password The password for the database user.
U Update mode. Issue query directly to the database.
D

Drop-only processing; revoke all permissions from all Lawson tables for all Lawson users.

Once Lawson table-level security exists in the IBM DB2 database, generate SQL statements to remove it by running the bldibmsec utility with the drop (-D) flag.

DataArea The data area that you want to apply security to.
DatabaseService

The name of the database service defined for your system.

For each RMId, bldibmsec validates its access to the DatabaseService. If the RMId has access to the service, bldibmsec resolves the RMIds database login and generates the grant/revoke SQL statement.

V Print the version.
q Do not print the commands to stdout.

Error Processing

If an error occurs that the bldibmsec utility cannot handle, it stops immediately. The commands that have executed up until that point remain in effect, but no further commands are executed. To revoke the permissions granted up to that point, run the utility again with the same set of options plus the -D option. For example, if when the error occurred you were running the following:

bldibmsec -U dataarea

then run:

bldibmsec -DU dataarea