DSNX238I RACROUTE racroute-request-type REQUEST FOR authorization-ID FAILED FOR OPERATION operation ON target. SYSTEM AUTHORIZATION FACILITY RETURN CODE saf-return-code SECURITY SERVER RETURN CODE security-server-return-code SECURITY SERVER REASON CODE security-server-reason-code SECURITY SERVER AUTHORIZATION CHECK FAILED FOR DSNR CLASS RESOURCE resource-name

Explanation

The access control authorization exit (DSNX@XAC) is active. The Db2 subsystem parameter AUTHEXIT_CHECK is set to DB2, so that the owner of an object is used for authorization checks. When the owner attempted to perform an operation on the indicated object, the operation failed because creation of an ACEE for the owner failed.

racroute-request-type

The RACROUTE REQUEST type that was sent to the system authorization facility (SAF).

authorization-ID

The authorization ID.

operation

The operation that was performed.

target

The target of the operation that is performed. Possible values are:

• SYSTEM, if the operation applies to an entire Db2 subsystem.
• The name of the object on which the operation is performed.

saf-return-code

The error code that was returned from SAF.

security-server-return-code

The return code that was returned from a security server, such as RACF®.

security-server-reason-code

The reason code that was returned from a security server, such as RACF.

resource-name

The name of the resource that RACF performed authorization check during the creation of the ACEE for the owner.

For example, if the security server is RACF, and the object owner is not defined to RACF, SAF code 4, RACF return code 4, and RACF reason code 0 are displayed in this message.