Technical Blog Post
Abstract
Easily compare permissions between two security groups
Body
Which tables can we query to find out the difference between the access rights between 2 security groups because it's very long to verify them manually on the screen ?
Well, it's a good questions, but basically there is a technique that can be used, which is to compare data from some tables as below :
The easiest way to view the basic permission information on a SELECT query by groups would be this :
SELECT GROUPNAME, APP, OPTIONNAME, CONDITIONNUM FROM APPLICATIONAUTH ORDER BY GROUPNAME;
If you would to see more complex info about application access + permissions or security restrictions, then you would need something like this :
SELECT * FROM COLLECTIONAUTH ORDER BY GROUPNAME;
SELECT * FROM SECURITYRESTRICT ORDER BY GROUPNAME;
SELECT * FROM APPLICATIONAUTH ORDER BY GROUPNAME, APP;
SELECT * FROM SITEAUTH ORDER BY GROUPNAME, SITEID;
SELECT * FROM LOCAUTH ORDER BY GROUPNAME, SITEID;
Good Luck.
See ya
UID
ibm11112697