Hi Binyamin,
You can use SET CURRENT SCHEMA to direct the explain . It doesn't require
SYSADM.
Regards,
Ron
-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of
Binyamin Dissen
Sent: Tuesday, 25 November 2025 1:40 AM
To: [email protected]
Subject: Re: DB2 query - is there a way to give a specific permission for a
user to SET CURRENT SQLID to another user?
Direct an EXPLAIN command.
On Mon, 24 Nov 2025 10:24:41 -0500 Grace Godfrey
<[email protected]> wrote:
:>Tell us more about what you're trying to do. Are you trying to bypass a
:>restriction?
:>
:>
:>On Mon, Nov 24, 2025 at 7:07?AM Binyamin Dissen <
:>[email protected]> wrote:
:>
:>> I wanted a drop in solution with just RACF & DB2 commands. Doesn't look
:>> like :>> it exists.
:>>
:>> On Sun, 23 Nov 2025 23:10:10 -0600 Jon Perryman <[email protected]> :>>
wrote:
:>>
:>> :>On Mon, 24 Nov 2025 00:40:47 +0200, Binyamin Dissen < :>>
[email protected]> wrote:
:>>
:>> :>>DB2 query - is there a way to give a specific permission for a user to
:>> SET :>> :>>CURRENT SQLID to another user without special privileges?
Something :>> thru the :>> :>>surrogate class?
:>>
:>> :>I researched (never implemented) this for a project and found that DB2
:>> secondary authorization id's are implemented through a DB2 user exit. Maybe
:>> someone has used it but if not, the doc is :>>
https://www.ibm.com/docs/en/db2-for-zos/13.0.0?topic=applications-using-secondary-ids-sign-requests
:>>
:>> :>I suspect you could implement it using SUROGAT but I suspect there must
:>> be a reason why IBM chose RACF groups. Hopefully someone has some real :>>
experience.
:>>
:>> --
:>> Binyamin Dissen <[email protected]> :>>
http://www.dissensoftware.com/
:>>
:>> Director, Dissen Software, Bar & Grill - Israel :>> :>>
----------------------------------------------------------------------
:>> For IBM-MAIN subscribe / signoff / archive access instructions, :>> send
email to [email protected] with the message: INFO IBM-MAIN :>> :>
:>----------------------------------------------------------------------
:>For IBM-MAIN subscribe / signoff / archive access instructions, :>send email
to [email protected] with the message: INFO IBM-MAIN
--
Binyamin Dissen <[email protected]>
http://www.dissensoftware.com/
Director, Dissen Software, Bar & Grill - Israel
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to
[email protected] with the message: INFO IBM-MAIN
Unencrypted electronic mail is not secure and may not be authentic. If you have
any doubts as to the contents, please telephone to confirm. This electronic
transmission including any attachments is intended only for those to whom it is
addressed. It may contain copyright material or information that is
confidential, privileged or exempt from disclosure by law. Any claim to
privilege is not waived or lost by reason of mistaken transmission of this
information. If you are not the intended recipient, you must not distribute or
copy this transmission and should please notify the sender. Your costs for
doing this will be reimbursed by the sender. We do not accept liability in
connection with computer virus, data corruption, delay, interruption,
unauthorised access or unauthorised amendment.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
