IBM Support

PH32457: DB2 ADMIN TOOL: REVOKE IMPACT REPORT COULD BE INCORRECT FOR USERS WITHOUT SYSADM ACCESS

A fix is available

Obtain the fix for this APAR.

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Db2 Admin Tool: A user without SYSADM access should be able
to access the Revoke impact report even though they lack the
privileges to actually execute the report.

For instance. a user may see a blank report that seems to
indicate there is no REVOKE impact.  However, the report is
only showing impacts based on the grants that particular user
issued and that they have the authority to revoke.

Local fix

  • Use an id with SYSADM to run a revoke impact report

Problem summary

  • ****************************************************************
* USERS AFFECTED: Users of the DB2 Admin Tool for Z/OS who     *
*                 want to view Revoke Impacts for an object    *
*                 in the catalog.                              *
****************************************************************
* PROBLEM DESCRIPTION: When a user without SYSADM access tries *
*                      to access the Revoke Impact report for  *
*                      an object in the catalog, an empty      *
*                      report is shown even if there would be  *
*                      objects impacted by the Revoke.         *
****************************************************************
Admin Tool should allow a user without SYSADM access to view a
Revoke Impact Report regardless of the fact that they cannot
execute the revoke. Admin Tool shows an empty report in this
case and misleads the user to thinking there is no impact of
executing the revoke.

Problem conclusion

  • The issue has been resolved.

Temporary fix

  • 



Comments


    

  • 



APAR Information




    

  • APAR number
    PH32457
    • 

  • Reported component name
    DB2 ADMIN TOOL
    • 

  • Reported component ID
    568851500
    • 

  • Reported release
    C10
    • 

  • Status
    CLOSED  PER
    • 

  • PE
    NoPE
    • 

  • HIPER
    NoHIPER
    • 

  • Special Attention
    NoSpecatt / Xsystem
    • 

  • Submitted date
    2020-12-08
    • 

  • Closed date
    2021-02-18
    • 

  • Last modified date
    2021-03-05
    • 





    

  • APAR is sysrouted FROM one or more of the following:
    

    • 

  • APAR is sysrouted TO one or more of the following:
    

    
UI74046
    

    • 



Modules/Macros


    

  • ADBRI00  ADBRIP9

    



Fix information


    

  • Fixed component name
    DB2 ADMIN TOOL
    • 

  • Fixed component ID
    568851500
    • 



Applicable component levels


    

  • RC10  PSY  UI74046
       UP21/02/23  P  F102
    • 



Fix is available


    

  • Select the PTF appropriate for your component level.
You will be required to sign in. Distribution on physical
media is not available in all countries.
    








      
              
                            

              

              [{"Line of Business":{"code":"LOB10","label":"Data and AI"},"Business Unit":{"code":"BU058","label":"IBM Infrastructure w\/TPS"},"Product":{"code":"SSZJXP","label":"DB2 Tools for z\/OS"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"12.1.0"}]
              

                          

          
 
        

      

    

      

        

          

            
Document Information


            

            


                        

            Modified date:
            

            06 March 2021
            

            
                      

        


        

        


      

    

  



    

  

  
    
            

          
Page Feedback