Three Layered Security

DB2 Provides Security at three level..

1. Instance Level
2. Database Level
3. Data Level

Authentication can take place either on the client side or server side or both as per the option specified in the database configuration file.

Following are types of authentication: -

• SERVER
• SERVER_ENCRYPT
• CLIENT
• KERBEROS
• KRB_SERVER_ENCRYPT
• DATA_ENCRYPT
• DATA_ENCRYPT_CMP
• GSS PLUGIN
• GSS_SERVER_ENCRYPT

Authorities

• SYSADMIN: -System Administrator (SYSADM) authority is the highest level of administrative authority available.(Migrate / Modify Database Manager Config File / Grant & Revoke DB Admin and DB Security authority)
• SYSCTRL: -System Control (SYSCTRL) authority is the highest level of system or instance control authority available.(create, update or drop a database, node, or database connection services (DCS) / Bap of all users / backup / restore / roll forward recover / trace)
• SYSMAINT: - same as 2 but cant create or drop DB
• SYSMON: - One word "Snapshot".
• DBADM: -
• SECADM
• LOAD

 SYSADMIN, SYSCTRL, SYSMAINT AND SYSMON are all assigned to groups and not users, also they have privileges at Instance level and all the database under that instance. Remaining authorities are assigned to user of a particular database and they have privileges only for a particular database.