Gurus,

Could you let me know if there is an issue with having a user (or group)
having more than one access to a table? I know this probably doesn't sound
clear, so maybe this will help...

If I query the syscat.tabauth table, I find grantee GROUP1 shows up twice
for table A. GRANTORA gave only select privs on the table, and GRANTORB
gave full access to the table.

We recently migrated to a new server by restoring a backup for the
database. Now, a user that is part of GROUP1 can't update the table. I
was thinking it might have to do with having the two different grants.
Maybe it worked before because the full access was granted later, but with
the restore, the grants reversed order???

Anyway, I tried to revoke all access. However, I get ...

Error during SQLExecute
42504(-558)[IBM][CLI Driver][DB2/NT] SQL0558N An attempt to revoke a
privilege from "GROUP1" was denied because "GROUP1" would still hold
"CONTROL" authority. SQLSTATE=42504

Any help would be greatly appreciated.

Thanks,

Dan Luchinski
Database Administrator
ASPCA Knowledge Management Center
University of Illinois Allied Agency

DB2 & UDB email list listserv db2-l LazyDBA home page