A fix is available
APAR status
Closed as program error.
Error description
UNLOAD authorization check on HALOAD. Implement the authorization check through DSNUTILB security validation. With this APAR, Db2 Analytics Accelerator Loader for z/OS will apply the same security validation as the Db2 UNLOAD utility to execute HALOAD. This solution is to be implemented for Db2 V12+ and will require users to APPLY Db2 for z/OS APAR PH45948, this Loader APAR PH46656 and any pre-req(s). If the Db2 for z/OS APAR PH45948 is not applied, existing Db2 Analytics Accelerator loader behavior will continue until Db2 for z/OS APAR PH45948 is applied. If authorization is not managed by Db2, but managed exclusively by RACF or other SAF products then applying the Db2 for z/OS APAR PH45948 is mandatory. Below is a summary of the authorization check with this APAR: - If SELECT privileges and UNLOAD privileges are granted, HALOAD will continue to work as expected. - When AUTH_COMPATIBILITY = 'SELECT_FOR_UNLOAD' is set and the user has only SELECT privilege, HALOAD will work - When AUTH_COMPATIBILITY = 'SELECT_FOR_UNLOAD' is set and the user has only UNLOAD privilege HALOAD will work - When AUTH_COMPATIBILITY is BLANK and the user has only SELECT privilege and no UNLOAD privilege, then the HALOAD job will fail the security check.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All Users * **************************************************************** * PROBLEM DESCRIPTION: UNLOAD authorization check on HALOAD. * **************************************************************** UNLOAD authorization check on HALOAD.
Problem conclusion
Temporary fix
Comments
APAR Information
APAR number
PH46656
Reported component name
IDAA LOADER ZOS
Reported component ID
5639OLA00
Reported release
210
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2022-05-23
Closed date
2022-07-25
Last modified date
2022-08-02
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI81641
Modules/Macros
HLO#A001 HLO#ACIR HLO#ACIW HLO#ACON HLO#ACRD HLO#ACUP HLO#ADIS HLO#ADSC HLO#AEXT HLO#AFMT HLO#AFRR HLO#ALLO HLO#AMIN HLO#AOBP HLO#ASYS HLO#AUMX HLO#AUTO HLO#BCLR HLO#BCTC HLO#BIND HLO#BPRI HLO#BRS HLO#BSQL HLO#BTMP HLO#BULD HLO#CARD HLO#CHKR HLO#CL HLO#CL64 HLO#CL7 HLO#CL8 HLO#CLLS HLO#CMTS HLO#CNTL HLO#CPM HLO#CPNT HLO#CPOL HLO#DB2V HLO#DCMD HLO#DISP HLO#DSAF HLO#DSPL HLO#DYNL HLO#ECIC HLO#EMCS HLO#EMIC HLO#EMID HLO#ENCR HLO#ENQS HLO#ENVF HLO#EPRI HLO#FCPY HLO#ICAI HLO#ICAL HLO#ICCC HLO#ICCI HLO#ICP7 HLO#ICP8 HLO#ICPO HLO#IDCF HLO#IDSA HLO#IERR HLO#IHSA HLO#IKPL HLO#IKPN HLO#ILGP HLO#ILRA HLO#ILRS HLO#ILSA HLO#INIT HLO#IOPF HLO#IPIE HLO#IPPB HLO#IPPC HLO#IPPD HLO#IPPH HLO#IPPL HLO#IPPN HLO#IPPS HLO#IRPL HLO#ISNA HLO#IX HLO#IX10 HLO#IX7 HLO#IX8 HLO#IX9 HLO#IXN8 HLO#IXP7 HLO#IXP8 HLO#IXP9 HLO#IXPT HLO#JPRI HLO#LGAA HLO#LGAC HLO#LGAF HLO#LGAI HLO#LGAP HLO#LOGR HLO#LPIO HLO#LRD6 HLO#LRPT HLO#MAIN HLO#MDRV HLO#MLOG HLO#MMGR HLO#MPRI HLO#MREP HLO#MTIO HLO#NREC HLO#OBEX HLO#OPCL HLO#OPRI HLO#OPVD HLO#OS HLO#OUT2 HLO#PDEP HLO#PITS HLO#PLOG HLO#PRNG HLO#PRSE HLO#QSAM HLO#RANG HLO#RCFS HLO#RESM HLO#RH HLO#RH10 HLO#RM24 HLO#RPRP HLO#RUNT HLO#SCHD HLO#SCPY HLO#SETP HLO#SETR HLO#SQLE HLO#STAT HLO#SUBD HLO#SUBX HLO#SYSC HLO#TABL HLO#TB HLO#TB7 HLO#TB8 HLO#TBPT HLO#TP HLO#TP10 HLO#TS HLO#TS10 HLO#TS7 HLO#TS8 HLO#TS9 HLO#TSS HLO#TSSA HLO#TUTL HLO#UPRI HLO#UTED HLO#UTLL HLO#UTLS HLO#UTOB HLO#UTOP HLO#VERS HLO#VERT HLO#VSAM HLO#VSM HLO#WRIT HLO#XMLC HLO#XMLI HLO#XMLJ HLO#XMLS HLO$ACCS HLO$ACES HLO$ADM2 HLO$ADMN HLO$ADMS HLO$ALLC HLO$BCHJ HLO$BCPY HLO$BDSN HLO$BGDG HLO$BJBC HLO$BJBN HLO$BMSD HLO$BMSG HLO$BPRD HLO$BRST HLO$BULD HLO$BULJ HLO$BUT2 HLO$BUTA HLO$BUTB HLO$BUTC HLO$BUTD HLO$BUTE HLO$BUTG HLO$BUTH HLO$BUTI HLO$BUTJ HLO$BUTK HLO$BUTM HLO$BUTP HLO$BUTQ HLO$BUTR HLO$BUTS HLO$BUTT HLO$BUTU HLO$BUTV HLO$BUTX HLO$BUTZ HLO$CALL HLO$CHAR HLO$CRID HLO$CTCM HLO$DCVT HLO$DLOG HLO$DSET HLO$EDIT HLO$EDT2 HLO$EDTI HLO$EDTT HLO$EQRY HLO$EXPB HLO$EXPD HLO$EXPF HLO$FCOL HLO$IMPD HLO$IMPE HLO$IMPF HLO$JBRK HLO$JOBD HLO$JOBR HLO$JOPT HLO$JOTM HLO$JOVR HLO$JPRC HLO$JPRD HLO$JPRJ HLO$JPRU HLO$LJBO HLO$LOBJ HLO$LPRD HLO$LSTP HLO$OINC HLO$OPRC HLO$OPRD HLO$OPRE HLO$OPRI
Fix information
Fixed component name
IDAA LOADER ZOS
Fixed component ID
5639OLA00
Applicable component levels
R210 PSY UI81641
UP22/07/27 P F207
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSZJXP","label":"DB2 Tools for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"2.1.0","Line of Business":{"code":"LOB10","label":"Data and AI"}}]
Document Information
Modified date:
02 August 2022