The extra BINDAUTH and EXECUTEAUTH privileges on NULLID.ATSO05
package are added to PUBLIC on Db2 v11.5 after restoring older
RESTRICTIVE database image as below.
The original database is a RESTRICTIVE database and the extra
BINDAUTH and EXECUTEAUTH privileges should not be added even
after restoring RESTRICTIVE database.
* The privileges on the original RESTRICTIVE database
$ db2 "select DISTINCT substr(GRANTOR,1,15) as
GRANTOR,substr(GRANTEE,1,15) as
GRANTEE,GRANTEETYPE,substr(PKGSCHEMA,1,15) as
PKGSCHEMA,CONTROLAUTH,BINDAUTH,EXECUTEAUTH from
syscat.PACKAGEAUTH"
GRANTOR GRANTEE GRANTEETYPE PKGSCHEMA
CONTROLAUTH BINDAUTH EXECUTEAUTH
--------------- --------------- ----------- ---------------
----------- -------- -----------
SYSIBM DB2INST1 U NULLID Y
G G
SYSIBM DB2INST1 U SYSIBMADM Y
G G
SYSIBM DB2INST1 U SYSIBMINTERNAL Y
G G
SYSIBM DB2INST1 U SYSPROC Y
G G
4 record(s) selected.
* The extra privileges on the restored RESTRICTIVE database
$ db2 "select DISTINCT substr(GRANTOR,1,15) as
GRANTOR,substr(GRANTEE,1,15) as
GRANTEE,GRANTEETYPE,substr(PKGSCHEMA,1,15) as
PKGSCHEMA,CONTROLAUTH,BINDAUTH,EXECUTEAUTH from
syscat.PACKAGEAUTH"
GRANTOR GRANTEE GRANTEETYPE PKGSCHEMA
CONTROLAUTH BINDAUTH EXECUTEAUTH
--------------- --------------- ----------- ---------------
----------- -------- -----------
SYSIBM DB2INST1 U NULLID Y
G G
SYSIBM DB2INST1 U SYSIBMADM Y
G G
SYSIBM DB2INST1 U SYSIBMINTERNAL Y
G G
SYSIBM DB2INST1 U SYSPROC Y
G G
DB2INST1 PUBLIC G NULLID N
Y Y
5 record(s) selected.
$ db2 "select char(GRANTOR,10) GRANTOR, char(GRANTEE,10)
GRANTEE, GRANTEETYPE, char(PKGSCHEMA,10) PKGSCHEMA,
char(PKGNAME,16) PKGNAME, CONTROLAUTH, BINDAUTH, EXECUTEAUTH
from syscat.PACKAGEAUTH where PKGSCHEMA = 'NULLID' and GRANTEE
= 'PUBLIC'"
GRANTOR GRANTEE GRANTEETYPE PKGSCHEMA PKGNAME
CONTROLAUTH BINDAUTH EXECUTEAUTH
---------- ---------- ----------- ---------- ----------------
----------- -------- -----------
DB2INST1 PUBLIC G NULLID ATSO05 N
Y Y |
