IC71197: PERMISSION ERROR -273 WHEN DOING DML ON SECONDARY SERVER WHEN SETTING A ROLE

APAR status

• Closed as program error.

Error description

• In your database you restrict the DML operation on a database
  object to a certain role. On a secondary server you use "SET
  ROLE" for a user to switch the role and you have granted this
  user to allow this operation. A DML operation on the primary
  server will work. However, when you attempt the same on a
  secondary server (in an updatable secondary environment) you
  will get the permission error -273.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * MACH11 users using set role on secondary nodes.              *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * After being granted a role (via the primary node of a MACH11 *
  * cluster), that user on the secondary node is not able to     *
  * make use of that granted role.                               *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to 11.50xC8 when available.                          *
  ****************************************************************
  

Problem conclusion

• Problem fixed in 11.50xC8.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM IDS ENTRP E

• Fixed component ID

  5724L2304

Applicable component levels

• RB15 PSY

     UP