IBM Support

PI37767: BIND/REBIND WITH EXPLAIN(ONLY) FAILS WITH AUTHORIZATION ERROR DSNT235I EVEN THOUGH USER IS AUTHORIZED TO PERFORM THE (RE)BIND

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • The EXPLAIN privilege should allow a user to BIND or REBIND a
    package with EXPLAIN(ONLY) even if the user doesn't have
    authority for a normal BIND/REBIND.
    
    This APAR fixes a problem where a user with authority for a
    normal BIND/REBIND is not allowed to BIND/REBIND with
    EXPLAIN(ONLY) without the EXPLAIN privilege.
    
    Additional Keywords:
    SQLEXPLAIN DSNT235I SQLCODE567
    

Local fix

  • Grant EXPLAIN privilege to the user.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: DB2 11 for z/OS users of bind option         *
    *                 EXPLAIN(ONLY)                                *
    ****************************************************************
    * PROBLEM DESCRIPTION: DB2 will fail BIND/REBIND with          *
    *                      EXPLAIN(ONLY) with DSNT235I or          *
    *                      SQLCODE -567 unless the user has the    *
    *                      EXPLAIN privilege                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    The EXPLAIN privilege allows users to BIND/REBIND a
    package with EXPLAIN(ONLY) even when that user doesn't have
    the authority to perform a traditional BIND/REBIND.
    
    DB2 is incorrectly failing BIND/REBIND with EXPLAIN(ONLY) with
    error DSNT235I or SQLCODE -567 for users who have authority to
    perform a traditional BIND/REBIND but do not have the EXPLAIN
    privilege.
    
    Additional Keywords:
    SQLEXPLAIN DSNT235I SQLCODE567
    

Problem conclusion

  • DB2 code has been fixed to not require the EXPLAIN privilege
    on BIND/REBIND with EXPLAIN(ONLY).
    

Temporary fix

Comments

APAR Information

  • APAR number

    PI37767

  • Reported component name

    DB2 OS/390 & Z/

  • Reported component ID

    5740XYR00

  • Reported release

    B10

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2015-03-25

  • Closed date

    2015-05-19

  • Last modified date

    2017-10-10

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI27773

Modules/Macros

  • DSNTBCM2 DSNTBRB2
    

Fix information

  • Fixed component name

    DB2 OS/390 & Z/

  • Fixed component ID

    5740XYR00

Applicable component levels

  • RB10 PSY UI27773

       UP15/06/04 P F506

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSEPEK","label":"Db2 for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}},{"Business Unit":{"code":"BU054","label":"Systems w\/TPS"},"Product":{"code":"SG19M","label":"APARs - z\/OS environment"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.0","Edition":"","Line of Business":{"code":"","label":""}}]

Document Information

Modified date:
10 October 2017