# 授予DATAACCESS权限
GRANT DATAACCESS ON DATABASE TO USER db2user1;

# 授予多个权限
GRANT CREATETAB, BINDADD, LOAD ON DATABASE TO USER db2user1;

# 授予组权限
GRANT CONNECT, CREATETAB ON DATABASE TO GROUP db2users;

# 授予表的多个权限
GRANT SELECT, INSERT, UPDATE, DELETE ON fgedu_order TO USER db2user1;

# 授予所有权限
GRANT ALL ON fgedu_order TO USER db2user1;

# 授予模式权限
GRANT CREATEIN, ALTERIN, DROPIN ON SCHEMA fgedu TO USER db2user1;

# 授予存储过程执行权限
GRANT EXECUTE ON PROCEDURE fgedu.sp_get_order TO USER db2user1;

# 撤销对象级别权限
REVOKE SELECT, INSERT ON fgedu_order FROM USER db2user1;

# 撤销所有权限
REVOKE ALL ON fgedu_order FROM USER db2user1;

# 授予角色权限
GRANT SELECT ON fgedu_order TO ROLE app_read_role;
GRANT SELECT, INSERT, UPDATE, DELETE ON fgedu_order TO ROLE app_write_role;

# 将角色授予用户
GRANT ROLE app_read_role TO USER db2user1;
GRANT ROLE app_write_role TO USER db2user2;

# 启用角色
SET ROLE app_read_role;

# 查看角色信息
SELECT * FROM SYSCAT.ROLES;
SELECT * FROM SYSCAT.ROLEAUTH;

# 配置认证方式
db2 update dbm cfg using AUTHENTICATION SERVER;

# 限制实例用户
db2 update dbm cfg using SYSADM_GROUP db2adm;

# 配置审计
db2 update dbm cfg using AUDIT_BUF_SZ 1000;

# 创建安全策略
CREATE SECURITY POLICY fgedu_security_policy;

# 配置加密
CREATE TABLESPACE encrypt_ts ENCRYPT USING ‘AES256’;

# 查看数据库配置
db2 get db cfg for fgedb;

# 查看表权限
SELECT TABSCHEMA, TABNAME, GRANTEE, GRANTEETYPE, CONTROLAUTH, ALTERAUTH, DELETEAUTH, INSERTAUTH, SELECTAUTH, UPDATEAUTH
FROM SYSCAT.TABAUTH
WHERE TABSCHEMA = ‘FGEDU’;

# 查看模式权限
SELECT SCHEMANAME, GRANTEE, GRANTEETYPE, CREATEINAUTH, ALTERINAUTH, DROPINAUTH
FROM SYSCAT.SCHEMAAUTH;

# 查看角色权限
SELECT ROLE, GRANTEE, GRANTEETYPE, ADMIN
FROM SYSCAT.ROLEAUTH;