A fix is available
APAR status
Closed as program error.
Error description
Using a NOT parm in a CARLa Select statement can cause no data to be returned Using the following CARLa code will result in no data being returned newlist type=ACCESS define isDB2 true where userid=SYSADM define isDataset true where class=DATASET select rectype=AUTH not(isDB2) list recno userid isDB2("DB2") isDataset("Dataset",7) rectype The following CARLa with two select statements works as expected n type=access define isDB2 true where userid=SYSADM define isDataset true where class=DATASET select rectype=auth select not(isDB2) list recno userid isDB2("DB2") isDataset("Dataset",7) rectype
Local fix
N/A
Problem summary
**************************************************************** * USERS AFFECTED: Users of zSecure CARLa Command Language * * exploiting defined variables of kind TRUE * * in the selection criteria. * **************************************************************** * PROBLEM DESCRIPTION: Record selection on defined variables * * of kind TRUE might not function * * properly when a NOT operator is * * applied for reports eligible for * * pre-selection performance optimization. * **************************************************************** * RECOMMENDATION: Apply the PTF provided. * **************************************************************** When a NOT operator is applied to a defined variable of kind TRUE in the report selection expression, the zSecure processing engine does not perform record selection properly for reports eligible for the pre-selection performance optimization. This applies for the following report types: o ACCESS o ACF2_SENSDSN_ACCESS o ACF2_SENSRESOURCE_ACCESS o ACF2LID o DB2_ACCESS o DB2_PACKAGE o DB2_TABLE o DSN o RACF_ACCESS o RESOURCE o SENSDSN o TRUSTED
Problem conclusion
zSecure processing engine has been modified, so that record selection on defined variables of kind TRUE is performed properly.
Temporary fix
Comments
APAR Information
APAR number
OA68190
Reported component name
ZSEC BASE,ADMIN
Reported component ID
5655T0100
Reported release
310
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2025-07-11
Closed date
2025-08-18
Last modified date
2025-08-31
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UJ97833
Modules/Macros
CKASLGIN GKRSLGIN
Fix information
Fixed component name
ZSEC BASE,ADMIN
Fixed component ID
5655T0100
Applicable component levels
R310 PSY UJ97833
UP25/08/22 P F508
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB70","label":"Z TPS"}}]
Document Information
Modified date:
31 August 2025