JR42908: "DSADMIN -ENABLEJOBADMIN" REQUIRED WRONGLY THAT THE USER WAS THE OWNER OF THE DATASTAGE ENGINE.

APAR status

• Closed as program error.

Error description

• InfoSphere Information Server security is defined as "Internal
  Registry".
  A new user is added as "Administrator" and with Credentials
  assigned to a new unix user.
  
  This unix user created a project sucessfully with the 'dsadmin'
  command
  ./dsadmin -domain .... -createproject <project name> - location
  <project directory>
  Status code = 0
  
  This new user was not able to update project properties:
  ./dsadmin -domain -enablejobadmin TRUE <project name>
  ERROR: (DSSetProjectProperty) ACCESS DENIED: You need to be an
  administrator to use this function.
  Status code = -100 DSJE_NOTADMINUSER
  

Local fix

• The property can be updated:
  - by the owner of the DataStage Engine ('dsadm'). using the
  command line tool 'dsadmin'.
  - by the new user with DataStage Administrator
  

Problem summary

• The dsadmin -enablejobadmin option fails if the DataStage server
  OS user id is not dsadm even if the user has the DataStage
  Administrator suite role.
  This, and several other option, uses the DSSetProjectProperty
  basic subroutine which applies the old IsAdmin test.
  

Problem conclusion

• Fixed dsadmin to do a suite role-check before calling
  DSSetProjectProperty and if the user has the DataStage
  Administrator suite role then pass a flag to
  DSSetProjectProperty indicating that the old IsAdmin test can be
  skipped.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  WIS DATASTAGE

• Fixed component ID

  5724Q36DS

Applicable component levels

• R850 PSY

     UP