UNLOAD privilege for the UNLOAD utility

A new UNLOAD privilege is introduced Db2 12 to provide better control for executing the UNLOAD utility.

In Db2 12, the SELECT privilege is no longer sufficient to execute the UNLOAD utility.

Before the activation of function level 500 or higher, IFCID 404 trace can be used to identify the usage of the SELECT privilege for UNLOAD utility access. The UNLOAD privilege can be granted prior to activation of, but it does not become effective until new function is activated. When new function is activated, the UNLOAD privilege takes effect by default.

After new function activation, if you want the SELECT privilege to be checked for UNLOAD utility access, set the AUTH_COMPATIBILITY system parameter to SELECT_FOR_UNLOAD. For more information, see Changes to the authorization check of the UNLOAD utility in Security release incompatibilities.