Looking for a way to control DDF threads

Corey McCardle

Looking for a way to control DDF threads
Hello All,

The setting is:

Users connect to DB2 OS/390 through a gateway...

Is there a way to control SPECIFIC DDF threads accessing a database
within a subsystem?

I have multiple databases within a subsystem and want to disallow access
to some and not all of the databases....Any ideas?

Corey N. McCardle
Database Administrator
Amerisure Companies
26777 Halsted Road
Farmington Hills, Mi 48331-3560
Phone: 248.426.7975
Cell: 248.739.0804
Fax: 248.426.7857
Email: [login to unmask email]

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

cliff boley

Re: Looking for a way to control DDF threads
(in response to Corey McCardle)
Corey,
Create DDF user groups (RACF etc.) and then use the standard table
authorization grants.
Also make sure none of your tables has auths granted to PUBLIC.

Is this what you're looking for?
cliff:-)

-----Original Message-----
From: McCardle, Corey [mailto:[login to unmask email]
Sent: Friday, December 03, 2004 8:16 AM
To: [login to unmask email]
Subject: Looking for a way to control DDF threads


Hello All,

The setting is:

Users connect to DB2 OS/390 through a gateway...

Is there a way to control SPECIFIC DDF threads accessing a database
within a subsystem?

I have multiple databases within a subsystem and want to disallow access
to some and not all of the databases....Any ideas?

Corey N. McCardle
Database Administrator
Amerisure Companies
26777 Halsted Road
Farmington Hills, Mi 48331-3560
Phone: 248.426.7975
Cell: 248.739.0804
Fax: 248.426.7857
Email: [login to unmask email]

----------------------------------------------------------------------------
-----
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home
page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select
"Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org.
The IDUG List Admins can be reached at [login to unmask email] Find
out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Tina Hilton

Re: Looking for a way to control DDF threads
(in response to cliff boley)
For our DB2 Connect users, we have shadow catalogs that they use. We specify
the owner of the shadow catalog in SYSSCHEMA parameter in db2cli.ini. It
restricts them to the tables and views they want to look at.

Tina

-----Original Message-----
From: DB2 Data Base Discussion List [mailto:[login to unmask email] On Behalf Of
McCardle, Corey
Sent: Friday, December 03, 2004 11:16 AM
To: [login to unmask email]
Subject: Looking for a way to control DDF threads

Hello All,

The setting is:

Users connect to DB2 OS/390 through a gateway...

Is there a way to control SPECIFIC DDF threads accessing a database
within a subsystem?

I have multiple databases within a subsystem and want to disallow access
to some and not all of the databases....Any ideas?

Corey N. McCardle
Database Administrator
Amerisure Companies
26777 Halsted Road
Farmington Hills, Mi 48331-3560
Phone: 248.426.7975
Cell: 248.739.0804
Fax: 248.426.7857
Email: [login to unmask email]

-----------------------------------------------------------------------------
----
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home
page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select
"Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org.
The IDUG List Admins can be reached at [login to unmask email] Find
out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Myron Miller

Re: Looking for a way to control DDF threads
(in response to Tina Hilton)
Suggestion: Make the users that are to connect with different database access
authorities connect with different authids, just as if they were TSO, batch,
SPUFI or QMF users. Then just grant those authids with the appropriate
authorities.

Authority from DDF doesn't have to be treated any differently than authority
from other DB2 connection threads if you don't want it to be.

Myron
--- "McCardle, Corey" <[login to unmask email]> wrote:

> Hello All,
>
> The setting is:
>
> Users connect to DB2 OS/390 through a gateway...
>
> Is there a way to control SPECIFIC DDF threads accessing a database
> within a subsystem?
>
> I have multiple databases within a subsystem and want to disallow access
> to some and not all of the databases....Any ideas?
>
> Corey N. McCardle
> Database Administrator
> Amerisure Companies
> 26777 Halsted Road
> Farmington Hills, Mi 48331-3560
> Phone: 248.426.7975
> Cell: 248.739.0804
> Fax: 248.426.7857
> Email: [login to unmask email]
>
>
---------------------------------------------------------------------------------
> Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home
> page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select
> "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org.
> The IDUG List Admins can be reached at [login to unmask email] Find
> out the latest on IDUG conferences at http://conferences.idug.org/index.cfm
>

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm