A fix is available
APAR status
Closed as new function.
Error description
This APAR will enhance QMF Administrator privilege support. QMF Administrator support may now be set through a user's profile via the MODEL column. When QMF Administrator privilege is set through the Q.PROFILES.MODEL column, privilege checking of INSERT and DELETE on Q.PROFILES is bypassed. This alleviates the long standing authority issues (SQL code -551) generated during QMF initialization.
Local fix
Problem summary
**************************************************************** * USERS AFFECTED: All QMF for TSO/CICS V12.1 users. * **************************************************************** * PROBLEM DESCRIPTION: This APAR adds new function to QMF for * * TSO and CICS V12.1. * * * * QMF Administrator privilege checking is * * enhanced to allow for settings via the * * user's QMF profile. Using new profile * * settings in the MODEL column, users may * * be considered a QMF Administrator. This * * method bypasses the traditional * * checking to see if the user has INSERT * * or DELETE privilege on the Q.PROFILES * * table. Using this new method, * * QMF Adminstrators may alleviate SQL * * code -551 errors seen for Q.PROFILES * * during the QMF initialization process. * * * * QMF Administrator privilege allows * * users to issue the SAVE, ERASE, IMPORT, * * EXPORT and DISPLAY commands on QMF * * objects that are owned by other users. * * * * With this fix, QMF Administrator * * privilege may now be set via the user's * * QMF profile. The QMF profile MODEL * * column is updated to have the following * * meaning: * * * * MODEL * * * * CHAR(8) * * * * Function * * * * Specifies behaviors and permissions for * * end users. * * * * Values * * * * NULL or blank * * * * No special permissions or behaviors * * are specified. * * * * REL * * * * Allowed for compatibility from previous * * releases. This value is no longer used * * and may be removed. * * * * Previously specified model for data * * access. REL is the current data access * * model and may not be overridden. * * * * A0 or RELA0 * * * * Bypass Q.PROFILES authorization * * checking for QMF Administrator * * privilege. User may not have QMF * * Administrator privilege. * * * * DSQEC_DISABLEADM is set to 1 and may * * not be updated. DSQAO_QMFADM will * * always be 0. This setting ignores * * DISADM installation option settings in * * DSQUOPTS. * * * * A1 or RELA1 * * * * Bypass Q.PROFILES authorization * * checking for QMF Administrator * * privilege. User may be a QMF * * Administrator but must set it * * themselves. * * * * DSQEC_DISABLEADM is set to 1 and may be * * updated. DSQAO_QMFADM will be 0 at * * initialization. This setting ignores * * DISADM installation option settings in * * DSQUOPTS. * * * * A2 or RELA2 * * * * Bypass Q.PROFILES authorization * * checking for QMF Administrator * * privilege. User starts up with QMF * * Administrator privilege. * * * * DSQEC_DISABLEADM is set to 0 and may be * * updated. DSQAO_QMFADM will be 1 at * * initialization. This setting ignores * * DISADM installation option settings in * * DSQUOPTS. * **************************************************************** * RECOMMENDATION: * ****************************************************************
Problem conclusion
Temporary fix
Comments
New global variable DSQAP_MODEL is updated to reflect the value of the user's Q.PROFILE.MODEL column. * The DISPLAY PROFILE and SET PROFILE ? panels are updated to reflect the new possible MODEL values. The MODEL option may not be updated from the SET PROFILE command and PROFILE panel. This behavior is consistent with behavior prior to this fix. * Messages DSQ21522, DSQ21801 and DSQ22002 are updated to read: The MODEL option may not be updated. Explanation: &V2 is not valid for the MODEL option. The MODEL option is a QMF Administrator option which may not be updated from the PROFILE panel or SET PROFILE command. When using RESET QUERY, the MODEL option must be set to REL. Suggested Action: Do not update the MODEL option.
APAR Information
APAR number
PH31508
Reported component name
QMF-QUERY MGMT
Reported component ID
566872101
Reported release
C10
Status
CLOSED UR1
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt / Xsystem
Submitted date
2020-11-10
Closed date
2020-12-08
Last modified date
2021-01-04
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
UI72995
Modules/Macros
DSQCELTT DSQCGVSI DSQCRSNC DSQCSETS DSQDRSET DSQDSET DSQDVLPF DSQIAUTH DSQIUPRF DSQJUPRF DSQPNLE
Fix information
Fixed component name
QMF-QUERY MGMT
Fixed component ID
566872101
Applicable component levels
RC10 PSY UI72995
UP20/12/10 P F012
Fix is available
Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.
[{"Line of Business":{"code":null,"label":null},"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS9UMF","label":"DB2 Query Management Facility"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"12.1.0"}]
Document Information
Modified date:
05 January 2021