IBM Support

PM45383: PANEL ADB21T PROTOTYPING SEL COMMAND FAILS SQLCODEN551 ON OBJECT SYSIBM.SYSCOLUMNS

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • DB2 Administration Tool for z/OS panel ADB21T line command SEL
    allows prototyping SELECT commands. When customer environment
    has not issued the following GRANT from Admin sample joblib
    member ADBSAMP( ADBGC ):
       GRANT SELECT ON TABLE SYSIBM.SYSCOLUMNS TO PUBLIC AT ALL
       LOCATIONS;
    then SELECT prototyping statements can fail with sqlcode -551
    with error MSGDSNT408I similar to:
    .
    DSNT408I SQLCODE = -551, ERROR: sqlid DOES NOT HAVE THE
      PRIVILEGE TO PERFORM OPERATION SELECT ON OBJECT
      SYSIBM.SYSCOLUMNS
    .
    Additional symptoms: sqlcode551
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of the DB2 Administration Tool for     *
    *                 z/OS who use the SEL, DEL, INS or UPD        *
    *                 line commands on panel ADB21T 'Tables,       *
    *                 Views, Aliases' for SQL prototyping          *
    *                 and who restrict user's access to the        *
    *                 SYSIBM.SYSCOLUMNS table.                     *
    ****************************************************************
    * PROBLEM DESCRIPTION: When the following GRANT from DB2 Admin *
    *                      sample joblib member ADBSAMP ( ADBGC ): *
    *                                                              *
    *                         GRANT SELECT ON TABLE                *
    *                         SYSIBM.SYSCOLUMNS TO                 *
    *                         PUBLIC AT ALL LOCATIONS;             *
    *                                                              *
    *                                                              *
    *                      has not been issued, the SELECT         *
    *                      prototyping statements can fail with    *
    *                      SQLCODEN551 / SQLCODE=-551              *
    *                      with error MSGDSNT408I similar to:      *
    *                                                              *
    *                      DSNT408I SQLCODE = -551, ERROR:         *
    *                      sqlid DOES NOT HAVE THE PRIVILEGE       *
    *                      TO PERFORM OPERATION SELECT             *
    *                      ON OBJECT SYSIBM.SYSCOLUMNS             *
    *                                                              *
    *                      as DB2 audit restrictions do not allow  *
    *                      grants on SYSIBM.SYSCOLUMNS.            *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Users cannot use the the SELECT prototyping line command on
    tables that do not have authorization on the SYSIBM.SYSCOLUMNS
    table.
    

Problem conclusion

  • Code has been changed for SEL, DEL and UPD line command for
    prototyping to get column information for the panels without
    accessing SYSIBM.SYSCOLUMNS table and SYSIBM.SYSCOLUMNS table
    will be accessed only if period specification line commands
    (i.e BUSINESS or SYSTEM) are used.  If the user does not have
    authorization for SYSIBM.SYSCOLUMNS for period specification
    validation when BUSINESS or SYSTEM line command is issued,
    a warning message, ADB518W:
    
    'Validation not allowed - Validation cannot be done for
    business/system line command due to authorization
    errors.  Prototyping will be done without validation.'
    
    will be issued but period specification information
    for the "FOR" clause  will be accepted.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM45383

  • Reported component name

    DB2 ADMIN TOOL

  • Reported component ID

    568851500

  • Reported release

    A10

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2011-08-09

  • Closed date

    2011-12-22

  • Last modified date

    2012-01-01

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UK75063

Modules/Macros

  •    ADB21A   ADB21T   ADB21TDE ADB21TIN ADB21TSE
    ADB21TUP ADB223T  ADB51
    

Fix information

  • Fixed component name

    DB2 ADMIN TOOL

  • Fixed component ID

    568851500

Applicable component levels

  • RA10 PSY UK75063

       UP11/12/24 P F112

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSCVQTD","label":"IBM Db2 Administration Tool for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.1.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
01 January 2012