Hi all -

DB2 V9.7.5 under AIX 6.1

I want to force users to do their SELECT etc statements against a view
and not against the underlying table(s) in that view.

Any ideas?

Revoke all provoleges for the tables.
And grant necessary privileges for the views.

On Feb 8, 9:17 am, Tonkuma <tonk...@fiberbit.net> wrote:

How would that help?  I wouldn't be able to get to the tables... I
want to simply enforce the rule: You MUST use the view and not select
on the base table.

On Feb 8, 9:38 am, Bruce <bwmille...@gmail.com> wrote:

This is a fundamental property of database security.  If you grant
permission
to a user to access a view, you are giving them the ability to see the
data in
that view, even if that user can't read the base table.

Ideas...

I saw a write-up that made it where users had different resultsets
when selecting from the same table.

The example had someone in New York doing queries on a table who
shouldn't be allowed to see stuff in New Jersey.

And I saw write-up just yesterday at IBM's site.

But just now I spent 5 minutes trying to find it and came up with
nothing :-)

The paper might have had to do with Transparent LDAP Authentication -
then maybe not. It wasn't a PDF white paper - it was HTML - like a
tutorial.

On Feb 8, 5:28 am, Bruce <bwmille...@gmail.com> wrote:

On 08.02.12 22:34 , gimme_this_gimme_t...@yahoo.com wrote:

You are talking about LBAC (Label Based Access Control) and this won't help in
this situation.

--
Helmut K. C. Tessarek
DB2 Performance and Development
IBM Toronto Lab