QAQQINI query options file authority requirements

QAQQINI is shipped with a *PUBLIC *USE authority. This authority allows users to view the query options file, but not change it. Changing the values of the QAQQINI file affects all queries run on the system. Allow only the system or database administrator to have *CHANGE authority to the QAQQINI query options file.

The query options file, which resides in the library specified on the Change Query Attributes (CHGQRYA) CL command QRYOPTLIB parameter, is always used by the query optimizer. It is used even if the user has no authority to the query options library and file. This authority provides the system administrator with an additional security mechanism.

When the QAQQINI file resides in the library QUSRSYS the query options affects all the query users on the system. To prevent anyone from inserting, deleting, or updating the query options, the system administrator must remove update authority from *PUBLIC to the file. This update authority prevents users from changing the data in the file.

A copy of the QAQQINI file can also reside in a user library. If that library is specified on the QRYOPTLIB parameter of the Change Query Attributes (CHGQRYA) command, the query options affect all the queries run for that user job. To prevent the query options from being retrieved from a particular library the system administrator can revoke authority to the Change Query Attributes (CHGQRYA) CL command.