IBM Support

PH31508: QMF ADMINISTRATOR SUPPORT ENHANCEMENTS

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as new function.

Error description

  • This APAR will enhance QMF Administrator privilege support. 
    QMF Administrator support may now be set through a user's
    profile via the MODEL column. When QMF Administrator privilege
    is set through the Q.PROFILES.MODEL column, privilege checking
    of INSERT and DELETE on Q.PROFILES is bypassed.
    
    This alleviates the long standing authority issues (SQL code
    -551) generated during QMF initialization.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All QMF for TSO/CICS V12.1 users.            *
    ****************************************************************
    * PROBLEM DESCRIPTION: This APAR adds new function to QMF for  *
    *                      TSO and CICS V12.1.                     *
    *                                                              *
    *                      QMF Administrator privilege checking is *
    *                      enhanced to allow for settings via the  *
    *                      user's QMF profile. Using new profile   *
    *                      settings in the MODEL column, users may *
    *                      be considered a QMF Administrator. This *
    *                      method bypasses the traditional         *
    *                      checking to see if the user has INSERT  *
    *                      or DELETE privilege on the Q.PROFILES   *
    *                      table.  Using this new method,          *
    *                      QMF Adminstrators may alleviate SQL     *
    *                      code -551 errors seen for Q.PROFILES    *
    *                      during the QMF initialization process.  *
    *                                                              *
    *                      QMF Administrator privilege allows      *
    *                      users to issue the SAVE, ERASE, IMPORT, *
    *                      EXPORT and DISPLAY commands on QMF      *
    *                      objects that are owned by other users.  *
    *                                                              *
    *                      With this fix, QMF Administrator        *
    *                      privilege may now be set via the user's *
    *                      QMF profile. The QMF profile MODEL      *
    *                      column is updated to have the following *
    *                      meaning:                                *
    *                                                              *
    *                      MODEL                                   *
    *                                                              *
    *                      CHAR(8)                                 *
    *                                                              *
    *                      Function                                *
    *                                                              *
    *                      Specifies behaviors and permissions for *
    *                      end users.                              *
    *                                                              *
    *                      Values                                  *
    *                                                              *
    *                      NULL or blank                           *
    *                                                              *
    *                      No special permissions or behaviors     *
    *                      are specified.                          *
    *                                                              *
    *                      REL                                     *
    *                                                              *
    *                      Allowed for compatibility from previous *
    *                      releases.  This value is no longer used *
    *                      and may be removed.                     *
    *                                                              *
    *                      Previously specified model for data     *
    *                      access.  REL is the current data access *
    *                      model and may not be overridden.        *
    *                                                              *
    *                      A0 or RELA0                             *
    *                                                              *
    *                      Bypass Q.PROFILES authorization         *
    *                      checking for QMF Administrator          *
    *                      privilege. User may not have QMF        *
    *                      Administrator privilege.                *
    *                                                              *
    *                      DSQEC_DISABLEADM is set to 1 and may    *
    *                      not be updated.  DSQAO_QMFADM will      *
    *                      always be 0. This setting ignores       *
    *                      DISADM installation option settings in  *
    *                      DSQUOPTS.                               *
    *                                                              *
    *                      A1 or RELA1                             *
    *                                                              *
    *                      Bypass Q.PROFILES authorization         *
    *                      checking for QMF Administrator          *
    *                      privilege. User may be a QMF            *
    *                      Administrator but must set it           *
    *                      themselves.                             *
    *                                                              *
    *                      DSQEC_DISABLEADM is set to 1 and may be *
    *                      updated. DSQAO_QMFADM will be 0 at      *
    *                      initialization. This setting ignores    *
    *                      DISADM installation option settings in  *
    *                      DSQUOPTS.                               *
    *                                                              *
    *                      A2 or RELA2                             *
    *                                                              *
    *                      Bypass Q.PROFILES authorization         *
    *                      checking for QMF Administrator          *
    *                      privilege. User starts up with QMF      *
    *                      Administrator privilege.                *
    *                                                              *
    *                      DSQEC_DISABLEADM is set to 0 and may be *
    *                      updated. DSQAO_QMFADM will be 1 at      *
    *                      initialization. This setting ignores    *
    *                      DISADM installation option settings in  *
    *                      DSQUOPTS.                               *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    

Problem conclusion

Temporary fix

Comments

  • New global variable DSQAP_MODEL is updated to reflect
    the value of the user's Q.PROFILE.MODEL column.
    *
    The DISPLAY PROFILE and SET PROFILE ? panels are
    updated to reflect the new possible MODEL values.
    The MODEL option may not be updated from the
    SET PROFILE command and PROFILE panel. This behavior
    is consistent with behavior prior to this fix.
    
    *
    Messages DSQ21522, DSQ21801 and DSQ22002 are updated to read:
    
    The MODEL option may not be updated.
    
    Explanation:
      &V2 is not valid for the MODEL option.
      The MODEL option is a QMF Administrator option which may not
      be updated from the PROFILE panel or SET PROFILE command.
      When using RESET QUERY, the MODEL option must be set to REL.
    
    Suggested Action:
      Do not update the MODEL option.
    

APAR Information

  • APAR number

    PH31508

  • Reported component name

    QMF-QUERY MGMT

  • Reported component ID

    566872101

  • Reported release

    C10

  • Status

    CLOSED UR1

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2020-11-10

  • Closed date

    2020-12-08

  • Last modified date

    2021-01-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UI72995

Modules/Macros

  •    DSQCELTT DSQCGVSI DSQCRSNC DSQCSETS DSQDRSET
    DSQDSET  DSQDVLPF DSQIAUTH DSQIUPRF DSQJUPRF DSQPNLE
    

Fix information

  • Fixed component name

    QMF-QUERY MGMT

  • Fixed component ID

    566872101

Applicable component levels

  • RC10 PSY UI72995

       UP20/12/10 P F012

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Line of Business":{"code":null,"label":null},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS9UMF","label":"DB2 Query Management Facility"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"12.1.0"}]

Document Information

Modified date:
05 January 2021