DB2 – Does DB2 Support Host-Based Access Control?

access-controldb2

Coming from MySQL I was wondering whether DB2 has something similar to MySQL's user@host access rights concept.

Best Answer

By default DB2 delegates all authentication to the operating system of the server, so the "host" is always the same -- the DB2 server host and the authenticated user ID does have the "host" component and all privileges are verified against the user ID only.

Depending on what you are actually trying to achieve, you may be able to restrict access to certain actions or objects via custom authentication plugin, workload manager controls, or row/column access control mechanisms.

Edit

Thanks to @IanBjorhovde for reminding us of yet another option: trusted contexts (see tutorial), although it still is not an exact match. Even though you can restrict clients with certain IPs from connecting to the database, authentication is still performed at the server, so it's not exactly "user@remote_host" but rather "user@server_host connecting from remote_host".

Related Solutions

Mysql – How to UPDATE just one record in DB2

Actually, on the link you have, it mentions that you can update only one record, you just have to use cursors to do so. It then points you to the DECLARE CURSOR page.

So first, you would have to declare a cursor from your table with the select statement that would give you what you want.

DECLARE C1 CURSOR
FOR (SELECT * FROM MYTABLE WHERE...);

Move to the value of the record in the cursor that you want.

Then run you update statement against the cursor using the link you mention

UPDATE MYTABLE 
SET MYCOLUMN = ?
WHERE CURRENT OF C1;

I believe you need to issue a COMMIT (which closes the cursor unless you specify otherwise in the DECLARE CURSOR clause).

Check out the documentation in the link you have and in the one I have. You may end up having to use a stored procedure to run this.

Db2 – Does DB2 have equivalents for Oracle’s UTL_ENCODE and UTL_RAW modules

I believe you are correct. It does not look like DB2 has built in support for base64 encoding.

So that would leave the following as options:

Handle the encoding within your programs.
Write a Java routine (stored procedure) to handle it.
Using a different encryption scheme. DB2 comes with encryption built into itself. There is an ENCRYPT function. Check it out.

Be careful with Java implementations of base64 though. A coworker of mine has mentioned he has seen a bug in all versions of it, in which "words" that have duplicate letters can decrypt into junk. So be careful and double check your base64 encoding/decoding.

Best Answer

Related Solutions

Mysql – How to UPDATE just one record in DB2

Db2 – Does DB2 have equivalents for Oracle’s UTL_ENCODE and UTL_RAW modules

Related Question