IC67084: TABLE PERMISSIONS VIOLATION AFTER TRIGGER EXECUTION IN CROSS-DATABASE QUERY

APAR status

• Closed as program error.

Error description

• It is possible to bypass permissions on a table in
  cross-database query.
  Since trigger execution, with granted owner permissions, it is
  possible for non-privileged user to update table or insert new
  data as well in the current session.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users having cross database query and triggers               *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When DBA revokes permission on a table, trigger action can   *
  * allow dml operation on that table in the same session. In    *
  * this case , user can perform dml operation on that table     *
  * instead of receiving permission error from the server.       *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to 11.50.xC7.                                        *
  ****************************************************************
  

Problem conclusion

• Upgrade to 11.50.xC7.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM IDS ENTRP E

• Fixed component ID

  5724L2304

Applicable component levels

• RB15 PSN

     UP