IBM Support

IT29537: CREATE GLOBAL TEMPORARY TABLE IS IGNORING THE GROUP PRIVILEGES

Subscribe to this APAR

By subscribing, you receive periodic emails alerting you to the status of the APAR, along with a link to the fix after it becomes available. You can track this item individually or track all items by product.

Notify me when this APAR changes.

Notify me when an APAR for this component changes.

 

APAR status

  • Closed as program error.

Error description

  • A user who is member of a group  which  has  SELECT  privilege
    on the objects  and  then when that user is trying
    to  create a   Global Temporary Table  using those  objects
    it's  failing with SQL0551N
    
    Creating Global Temp Table (GTT) when the  WITH DATA  clause is
    specified is facing the problem.
    The users/developers have group level SELECT permissions which
    allows them to SELECT from the objects.
    However,   DECLARE GLOBAL TEMPORARY  TABLE  using SELECT from
    the same objects fail with  :
    
    DB21034E  The command was processed as an SQL statement because
    it was not a
    valid Command Line Processor command.  During SQL processing it
    returned:
    SQL0551N  The statement failed because the authorization ID does
    not have the
    required authorization or privilege to perform the operation.
    Authorization
    ID: "<>".  Operation: "SELECT". Object: "<>".
    SQLSTATE=42501
    

Local fix

  • To get this to work  assign explicit permission on the specific
    objects in the SELECT clause to the user invoking the
    DECLARE statement.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * ALL                                                          *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See Error Description                                        *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Upgrade to Db2 11.1 Mod 4 Fixpack 5 or higher                *
    ****************************************************************
    

Problem conclusion

  • First fixed in Db2 11.1 Mod 4 Fixpack 5
    

Temporary fix

Comments

APAR Information

  • APAR number

    IT29537

  • Reported component name

    DB2 FOR LUW

  • Reported component ID

    DB2FORLUW

  • Reported release

    A10

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2019-06-24

  • Closed date

    2020-01-16

  • Last modified date

    2020-01-16

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DB2 FOR LUW

  • Fixed component ID

    DB2FORLUW

Applicable component levels

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SSEPGG","label":"Db2 for Linux, UNIX and Windows"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.1","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
16 January 2020