DB2 privilege policies
The following privilege policies are available for DB2 databases:
| Policy Names | Contents | Description |
|---|---|---|
| Column Privileges | column privileges | |
| Database Privileges | database system privileges | |
| Index Privileges | Index privileges | This view contains the right to DROP the indfor example The creator of an index automatically has this CONTROL privilege. |
| Package Privileges | A package is a database object grouping related procedures, functions, associated cursors, and variables together. |
CONTROL: Provides the ability to rebind, drop, execute, and extend these package privileges to others. Only SYSADM and DBADM authorities can grant CONTROL privilege. BIND: Provides the privilege to rebind an existing package. EXECUTE: Provides the privilege to execute a package. |
| Schema Privileges | Objects within a schema : tables, views, indexes, packages, data types, functions, triggers, procedures, and aliases |
CREATEIN: Provides the privilege to create objects within the schema. ALTERIN: Provides the privilege to alter objects within the schema. DROPIN: Provides the privilege to drop objects within the schema |
| Table and View Privileges | Tables and view privileges |
CONTROL: Provides the privilege to DROP the table or view and GRANT table or view privileges to somebody else. ALTER: Provides the privilege to add columns, comments, primary key or unique constraint, in order to create triggers, and create or drop check constraints DELETE: Provides the privilege to delete rows INDEX: Provides the privilege to CREATE INDEX INSERT: Provides the privilege to INSERT rows. REFERENCES: Provides the privilege to CREATE or DROP a foreign key. SELECT: Provides the privilege to retrieve data. UPDATE: Provides the privilege to change existing entries. |
| Tablespace Privileges | tablespace privileges | A SYSADM or SYSCTRL authority can create Tablespace and grant USE privilege to others |