How to create a report for GRANT/REVOKE DCL statements with Log Analyzer?.

Document ID : KB000105989
Last Modified Date : 11/07/2018
Show Technical Document Details
Introduction:
Log Analyzer does not have an option to create a report with only GRANT/REVOKE DCL statements, the DDL report will include these statements with all the other statements. It is difficult to review the GRANT/REVOKE statements in the middle of the other DDL statements.
Instructions:
You can create the report with two steps:

1. Run DML report for the log range you are interested in, turn on reporting for DB2 Catalog tables and include only the tables listed below:

SYSIBM.SYSVARIABLEAUTH
SYSIBM.SYSUSERAUTH
SYSIBM.SYSTABAUTH
SYSIBM.SYSSEQUENCEAUTH
SYSIBM.SYSSCHEMAAUTH
SYSIBM.SYSROUTINEAUTH
SYSIBM.SYSRESAUTH
SYSIBM.SYSPLANAUTH
SYSIBM.SYSPACKAUTH
SYSIBM.SYSDBAUTH
SYSIBM.SYSCOLAUTH

Also make sure to specify valid data set names for Extract and Control files on output specification screen.
 
2. Run DDL report (Or generate REDO DDL) with GRANT and REVOKE statements included, but use the previously generated Extract and Control files as the source for the report. That way you will filter out all DDL statements you are not interested in and only GRANT/REVOKE DCL statements will remain in the output.