IBM Support

PK66066: Remove GRANT TO PUBLIC statements from DDL scripts for DB2 for z/OS

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The DDL scripts that define the database objects for the
    database domains "release", "community", "customization", and
    "jcr" of WebSphere Portal contain GRANT statements in case of
    DB2 for z/OS. Those statements are supposed to ensure that the
    database user can use those database objects. However, the GRANT
    statements are not necessary, because the object creator
    implicitly own the required privileges and additionally the
    GRANT statements grant those privileges to the public, which
    might be a security issue.
    

Local fix

Problem summary

  • The DDL scripts that define the database objects for the
    database domains "release", "community", "customization", and
    "jcr" of WebSphere Portal contain GRANT statements in case of
    DB2 for z/OS. Those statements are supposed to ensure that the
    database user can use those database objects. However, the GRANT
    statements are not necessary, because the object creator
    implicitly own the required privileges and additionally the
    GRANT statements grant those privileges to the public, which
    might be a security issue.
    

Problem conclusion

  • The GRANT statements are removed from the DDL scripts.
    
    Failing Module(s):
       Database
    
    Affected Users:
       All users
    
    Version Information:
        Portal Version(s): 6.0.1.3
         Pre-Requisite(s):
          Co-Requisite(s): ---
    
        Portal Version(s): 6.0.1.4
         Pre-Requisite(s):
          Co-Requisite(s): ---
    
        Portal Version(s): 6.1.0.0
         Pre-Requisite(s):
          Co-Requisite(s): ---
    
    Platform Specific:
       This fix applies to all platforms.
    
    A fix is available from Fix Central:
    
    http://www.ibm.com/eserver/support/fixes/fixcentral/swgquickorde
    r?apar=PK66066&productid=WebSphere%20Portal&brandid=5
    
    You may need to type or paste the complete address into your Web
    browser.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PK66066

  • Reported component name

    WEBSPHERE PORTA

  • Reported component ID

    5724E7600

  • Reported release

    60G

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2008-05-15

  • Closed date

    2008-11-12

  • Last modified date

    2008-11-12

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    WEBSPHERE PORTA

  • Fixed component ID

    5724E7600

Applicable component levels

  • R60G PSY

       UP

  • R60H PSY

       UP

  • R610 PSY

       UP

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSHRKX","label":"WebSphere Portal"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"6.0.1.3","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
12 November 2008