Programs that run under adopted authority for a distributed relational database

 

A distributed relational database program can run under adopted authority, which means the user adopts the program owner's authority to objects used by the program while running the program. When a program is created using the *SQL precompiler option for naming, the program runs under the program owner's user profile.

An SQL package from an unlike system always adopts the package owner's authority for all static SQL statements in the package. An SQL package created on the i5/OS^® operating system using the CRTSQLxxx command with OPTION(*SQL) specified also adopts the package owner's authority for all static SQL statements in the package.

A distributed relational database administrator can check security exposure on application servers by using the Display Programs that Adopt (DSPPGMADP) command. The DSPPGMADP command displays the programs and SQL packages that use a specified user profile, as shown here. You can also send the results of the command to a printer or to an output file.

Display Programs That Adopt  
User profile . . . . . . . :   MPSUP  
Object      Library   Type        Attribute   Text INVENT      SPIFFY    *PGM                    Adopting program CLIENT1     SPIFFY    *PGM                    Adopting program TESTINV     TEST      *PGM        CLP         Test inventory pgm INVENT1     SPIFFY    *SQLPKG                 SQL package CLIENT1     SPIFFY    *SQLPKG                 SQL package TESTINV     SPIFFY    *SQLPKG                 SQL package  
 
 
 
 
 
 
 
Bottom Press Enter to continue  
F3=Exit   F12=Cancel   F17=Top   F18=Bottom (C) COPYRIGHT IBM CORP. 1980, 1991.

 

Parent topic:

Security

 

Related reference

Display Programs that Adopt (DSPPGMADP) command