CODEWITHSUNDEEP
javalinuxjdbcdb2
maidokaara
maidokaara

Reputation: 33

Change the session user for DB2 while using JDBC

I have DB2 10.1 on Linux and I connect to it using Kerberos auth. Problem is that my user doesn't have permissions to do stuff so I need to impersonate another user using "SET SESSION_USER = otheruser".

This works fine if I use a client like DBArtisan, but I need to do this using JDBC and it doesn't seem to work. I've tried to execute the query every time a connection is created, I can query the value of the register and it has changed, but I still get errors if I try to query the tables my user doesn't have access to but the session user does.

Any ideas?

Upvotes: 0

Views: 1326

Answers (2)

Mark Rotteveel
Mark Rotteveel

Reputation: 108939

I have never used DB2, but a little googling led me to this page:

specialRegisters=special-register-name=special-register-value,…special-register-name=special-register-value

A list of special register settings for the JDBC connection. You can specify one or more special register name and value pairs. Special register name and value pairs must be delimited by commas (,). The last pair must end with a semicolon (;). For example:

    String url = 
     "jdbc:db2://sysmvs1.stl.ibm.com:5021/STLEC1" +
     ":user=dbadm;password=dbadm;" +
     "specialRegisters=CURRENT_PATH=SYSIBM,CURRENT CLIENT_USERID=test" + ";";
    Connection con = 
       java.sql.DriverManager.getConnection(url);

For special registers that can be set through IBM Data Server Driver for JDBC and SQLJ Connection properties, if you set a special register value in a URL string using specialRegisters, and you also set that value in a java.util.Properties object using the following form of getConnection, the special register is set to the value from the URL string.

As SESSION_USER is a special register, this seems to imply you need to specify it with your connection properties as

specialRegisters=SESSION_USER=otheruser;

Either in the JDBC url, or in the properties.

However as I have never used DB2, I don't know if this is the actual solution.

Upvotes: 1

Jorge_B
Jorge_B

Reputation: 9872

Normally the server-wide database connection pools are created with a specific user with the proper permissions as decided by the DBAs. Why don't you just ask your DBAs for the appropriate grants for that user? This would be the 'kind' approach instead of trying to circumvent their permissions policies by some java piece of code, something they may not like if they know of...

Upvotes: 0

Related Questions