Collecting data for authorization problems

If Db2 returns SQLCODE -551, which indicates an operation was denied, and you think it is valid, collect data for diagnosing authorization problems.

Before you begin

To diagnose authorization problems, you must have the appropriate authorization to collect data from different z/OS® components.

The type of diagnosis data that is collected is different for systems that use Db2 internal security than external security.

Collect the following data to diagnose authorization problems:

Service SQL information for the SQL statement to investigate, as described in Collecting service SQL documentation.
The complete SQLCA that is returned
The Db2 audit trace class 1 and 7 and Db2 performance trace class 22 from the time of failure
The source code for any Db2 exits (Sign-on, Collection, or Authorization) that are in effect
The bind parameters for the failing package