You use DROP SYSTEM_USER to delete a system entry, i.e. the assignment of an authorization identifier to a system user. You must specify the combination of system user and authorization identifier that was defined for a system entry with CREATE SYSTEM_USER.
You cannot delete a system entry if it is the last assignment of a system user to the authorization identifier of the universal user.
If an SQL transaction belonging to the system user is currently active, his or her system entry is only deleted if another system entry exists for the system user.
The SYSTEM_ENTRIES view of the INFORMATION_SCHEMA provides you with information on which authorization identifiers have been assigned to which system users (see chapter "Information schemas").
The current authorization identifier must have the special privilege CREATE USER. If the assignment of an authorization identifier with the special privilege CREATE USER and GRANT authorization (see section "GRANT - Grant privileges") to a system user is to be deleted, the current authorization identifier must also have GRANT authorization.
DROP SYSTEM_USER{ utm_user | bs2000_user }
FOR authorization_identifier
AT CATALOG catalog
utm_user ::= ({hostname|*},{utm_application_name|*},{utm_userid|*})
bs2000_user ::= ({hostname|*},[*],{bs2000_userid|*})
utm_user
Delete a system entry of a UTM system user.
bs2000_user
Delete a system entry of a BS2000 system user.
FOR authorization_identifier
Name of the authorization identifier assigned to the system user.
AT CATALOG catalog
Name of the database for which the assignment of the system user to the authorization identifier is to be deleted.
utm_user
Specification of the UTM user.
The UTM user must be specified precisely as defined with CREATE SYSTEM_USER. * means the system access which was defined with *, not all corresponding system accesses.
hostname
Alphanumeric literal indicating the symbolic host name.
If DCAM is not available on the host, the host is assigned the name 'HOMEPROC'.
* All hosts.
utm_application_name
Alphanumeric literal indicating the name of the UTM application.
* All UTM applications
utm_userid
You specify the UTM user ID as an alphanumeric literal defined with KDCSIGN for local UTM system users. For UTM-D, you specify the local UTM session name (LSES).
* All UTM user IDs.
bs2000_user
Specification of the BS2000 user.
The BS2000 user must be specified precisely as defined with CREATE SYSTEM_USER. * means the system access which was defined with *, not all corresponding system accesses.
hostname
Alphanumeric literal indicating the symbolic host name. If DCAM is not available on the host, the host is assigned the symbolic name 'HOMEPROC'.
* All hosts.
bs2000_userid
Alphanumeric literal indicating the BS2000 user ID.
* All BS2000 user IDs.
Example
In the example below, two system entries are deleted. The system entries must be specified exactly as they were defined with CREATE SYSTEM_USER. The authorization identifiers UTIUSR1 and UTIUSR2 are not deleted.
DROP SYSTEM_USER (*,*,'PHOTO') FOR utiusr1 AT CATALOG ordercust
DROP SYSTEM_USER (*,*,'TEXT') FOR utiusr2 AT CATALOG ordercust
See also
CREATE SYSTEM_USER, CREATE USER, DROP USER