PI98093: EXECUTING ADMIN TOOL-GENERATED GRANT DDL MAY RESULT IN SQLCODE = -552 / SQLNCODE552

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• If an ALTER is made to a table, and RUN SQLID and OBJECT
  GRANTOR are set to different authids  on the Alter Analysis
  Options panel(ADBP7P), a SET SQLID command is generated before
  the ALTER statement for the RUN SQLID authid, but it is not
  generated for the OBJECT GRANTOR before the GRANT statement.
  As a result, the GRANT statement will be executed under the
  RUN SQLID authid, and may fail with SQLCODE = -552 /
  SQLNCODE552, authorization-id DOES NOT HAVE THE PRIVILEGE TO
  PERFORM OPERATION GRANT.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of the DB2 Administration Tool for     *
  *                 z/OS.                                        *
  ****************************************************************
  * PROBLEM DESCRIPTION: When option 'Object Grantor' is set     *
  *                      and is different than 'RUN SQLID', SET  *
  *                      CURRENT SQLID is not generated for      *
  *                      the GRANT statement.                    *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When adding a column to a table that causes the table to be
  dropped/recreated, its associated view is also dropped/
  recreated. The GRANT VIEW statement is also generated. If
  in the Alter Analysis Options panel(ADBP7P), 'Run SQLID' and
  'Object Grantor' are set to different IDs, SET CURRENT SQLID
  is generated for the value of RUN SQLID for CREATE VIEW
  statement, but SET CURRENT SQLID is not generated for
  the GRANT statement. As a result, the GRANT statement will
  be executed under the RUN SQLID authid, and may fail with
  SQLCODE = -552 / SQLNCODE552, authorization-id DOES NOT
  HAVE THE PRIVILEGE TO PERFORM OPERATION GRANT.
  

Problem conclusion

• Problem has been resolved.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI58107 UI58108

Modules/Macros

•    ADB2CM3
  

Fix information

• Fixed component name

  DB2 ADMIN TOOL

• Fixed component ID

  568851500

Applicable component levels

• RB20 PSY UI58107

     UP18/09/07 P F809

• RC10 PSY UI58108

     UP18/09/07 P F809

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.