Online Documentation for SQL Manager for DB2

Security Labels


A Security label is a database object that describes a certain set of security criteria. Security labels are applied to data in order to protect it. They are granted to users to allow them to access protected data.

 

When a user tries to access protected data, their security label is compared to the security label that is protecting the data. The protecting security label will block some security labels and not block others. If a user’s security label is blocked then the user cannot access the data.

This object is available only for database server version 9.7 and higher.

 

Creating Security Labels

 

To create a new security label:

  • select the Database | New Object... main menu item;
  • select Security label in the Create New Object dialog;
  • edit security label properties using the appropriate tabs of Security label.

Hint: To create a new security label, you can also right-click the Security label node of the DB Explorer tree and select the New security label ... context menu item.

 

 

Editing Security Labels

 

To edit an existing security label:

  • select the security label for editing in the DB Explorer tree (type the first letters of the security label name for quick search);
  • right-click the object and select the Edit Security label <label_name>... context menu item, or simply double-click a security label;
  • edit Security label definition using the appropriate tabs of security label editor.

 

Dropping Security Labels

 

To drop a security label:

  • select the security label to drop in the DB Explorer tree;
  • right-click the object and select the Drop Security label <label_name>... context menu item;
  • confirm dropping in the dialog window.

 

Note: If more convenient, you can also use the following shortcuts:

Ctrl+N to create a new security label;

Ctrl+O to edit the selected security label;

Shift+Del to drop the object from the database.