Constraints in a multilevel-secure environment

Although a referential constraint is not allowed for the security label column, DB2® enforces referential constraints for other columns in the table that are not defined with a security label.

Constraints operate in an multilevel-secure environment in the following ways:

  • A unique constraint is allowed on a security label column.
  • A referential constraint is not allowed on a security label column.
  • A check constraint is not allowed on a security label column.

Multilevel security with row-level checking is not enforced when DB2 checks a referential constraint.