On an i5/OS system, when you specify 2 for the first parameter on the SECURITY statement, PowerExchange uses the connection user ID to control access to resources.
The user ID must have access to specific PowerExchange resources and to any resources that PowerExchange uses.
To use PowerExchange, users require the following authority levels:
To write messages to the PowerExchange log file, users must have *CHANGE authority to the
library. By default, PowerExchange create the
library with a default public authority of *USE.
To read data maps, users must have *USE authority to the data map library. By default, this library is called STDATAMAPS. To specify a different name, set the DMX_DIR parameter in the DBMOVER member of the CFG file.
To add, delete, or change data maps, users must have *CHANGE authority.
To read and write to other libraries, files, and DB2 tables through PowerExchange, users must have the appropriate authority.