IC71622: USING SDS, RECEIVING 272 ERROR "NO SELECT PERMISSION FOR <TABLE>" EVEN THOUGH USER HAS EXPRESSLY BEEN GRANTED SELECT

APAR status

• Closed as program error.

Error description

• 2 hosts: instance 1 on host 1, instance 2 on host 2
  
  instance 1 is primary
  instance 2 is updateable SDS
  
  1) Create a new user on both servers:
  
  for example: (useradd -g informix -d /home/user1 -s /bin/bash
  user1)
  
  This results in /etc/password
  
  user1:x:506:502::/home/user1:/bin/bash
  
  2) In instance 1 grant connect priviledge:
  
  grant connect to user1;
  
  3) Grant privileges on a table to user1:
  
  grant update on <table> to user1;
  grant select on <table> to user1;
  
  4) On secondary run the following:
  
  update <table> set <column> = '<value>' where <condition>;
  
  This receives 272: No SELECT permission for <table>.<column>
  
  5) Same statement on primary instance:
  
  update <table> set <column> = '<value>' where <condition>;
  
  
  1 row(s) updated.
  
  The user has the necessary privileges, but on the secondary,
  some issue is preventing the update.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All users on updatable secondary                             *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * When you are doing more that one grants for on a table and   *
  * there are other uses accessing the table on secondary nodes, *
  * then subsequent grants are not effective on secondary        *
  * servers                                                      *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Please upgrade to 11.50.xC8 when available.                  *
  ****************************************************************
  

Problem conclusion

• Problem is first fixed in 11.50.xC8
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  IBM IDS ENTRP E

• Fixed component ID

  5724L2304

Applicable component levels

• RB15 PSY

     UP