A fix is available
APAR status
Closed as program error.
Error description
DB2 Administration Tool for z/OS panel ADB21T line command SEL allows prototyping SELECT commands. When customer environment has not issued the following GRANT from Admin sample joblib member ADBSAMP( ADBGC ): GRANT SELECT ON TABLE SYSIBM.SYSCOLUMNS TO PUBLIC AT ALL LOCATIONS; then SELECT prototyping statements can fail with sqlcode -551 with error MSGDSNT408I similar to: . DSNT408I SQLCODE = -551, ERROR: sqlid DOES NOT HAVE THE PRIVILEGE TO PERFORM OPERATION SELECT ON OBJECT SYSIBM.SYSCOLUMNS . Additional symptoms: sqlcode551
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: Users of the DB2 Administration Tool for * * z/OS who use the SEL, DEL, INS or UPD * * line commands on panel ADB21T 'Tables, * * Views, Aliases' for SQL prototyping * * and who restrict user's access to the * * SYSIBM.SYSCOLUMNS table. * **************************************************************** * PROBLEM DESCRIPTION: When the following GRANT from DB2 Admin * * sample joblib member ADBSAMP ( ADBGC ): * * * * GRANT SELECT ON TABLE * * SYSIBM.SYSCOLUMNS TO * * PUBLIC AT ALL LOCATIONS; * * * * * * has not been issued, the SELECT * * prototyping statements can fail with * * SQLCODEN551 / SQLCODE=-551 * * with error MSGDSNT408I similar to: * * * * DSNT408I SQLCODE = -551, ERROR: * * sqlid DOES NOT HAVE THE PRIVILEGE * * TO PERFORM OPERATION SELECT * * ON OBJECT SYSIBM.SYSCOLUMNS * * * * as DB2 audit restrictions do not allow * * grants on SYSIBM.SYSCOLUMNS. * **************************************************************** * RECOMMENDATION: * **************************************************************** Users cannot use the the SELECT prototyping line command on tables that do not have authorization on the SYSIBM.SYSCOLUMNS table.
Problem conclusion
Code has been changed for SEL, DEL and UPD line command for prototyping to get column information for the panels without accessing SYSIBM.SYSCOLUMNS table and SYSIBM.SYSCOLUMNS table will be accessed only if period specification line commands (i.e BUSINESS or SYSTEM) are used. If the user does not have authorization for SYSIBM.SYSCOLUMNS for period specification validation when BUSINESS or SYSTEM line command is issued, a warning message, ADB518W: 'Validation not allowed - Validation cannot be done for business/system line command due to authorization errors. Prototyping will be done without validation.' will be issued but period specification information for the "FOR" clause will be accepted.
Temporary fix
Comments
APAR Information
APAR number
PM45383
Reported component name
DB2 ADMIN TOOL
Reported component ID
568851500
Reported release
A10
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2011-08-09
Closed date
2011-12-22
Last modified date
2012-01-01
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UK75063
Modules/Macros
ADB21A ADB21T ADB21TDE ADB21TIN ADB21TSE ADB21TUP ADB223T ADB51
Fix information
Fixed component name
DB2 ADMIN TOOL
Fixed component ID
568851500
Applicable component levels
RA10 PSY UK75063
UP11/12/24 P F112
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSCVQTD","label":"IBM Db2 Administration Tool for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.1.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
Document Information
Modified date:
01 January 2012