PH63381: MODIFY THE REVOKE IMPACT PROGRAM TO SUPPORT BYALL

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Modify the Revoke Impact program to support BYALL
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * Users of Db2 Administration Tool who request                 *
  * revoke impact reports                                        *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * This APAR allows users to specify ALL                        *
  * as a keyword for the revoke impact                           *
  * report and REVOKE statement.                                 *
  *                                                              *
  ****************************************************************
  The following ISPF panels for revoking privileges are
  updated to accept ALL in the BY clause of the REVOKE statement:
  ADB2RD, ADB2RE, ADB2RF, ADB2RG, ADB2RH, ADB2RK, ADB2RL, ADB2RO,
  ADB2RP, ADB2RQ, ADB2RR, ADB2RS, ADB2RZ, ADBPRGV
  
  The program for the revoke impact report is updated to
  process the keyword ALL in the BY clause.
  
  This enhancement also includes fixes for the following
  problems:
  - When the batch revoke impact report is called with multiple
    privilege names, the following errors might be reported:
    - Oncode 520 (SIGNAL SUBSCRIPTRANGE)
    - IBM0280S The ERROR condition was raised by a SIGNAL
      statement
  - When the batch revoke impact report is called with TYPE
    L (collection) and PRIV CREATE, no impact is reported.
  - When the batch revoke impact report is called with PRIV USE
    and TYPE G (storage group) or R (buffer pool), QUAL must
    be specified as blank. Because those objects do not have a
    qualifier, QUAL should be omitted.
  - When the batch revoke impact report is called, the
    parameters in PARMS DD are not applied to the statements in
    REQS DD.
  - When the batch revoke impact report is called with multiple
    statements in REQS DD, and the current statement lacks a
    parameter specification that the previous statement contains,
    the current statement is processed as if the previous
    statement's parameter is specified in the current statement.
    Example:
    //PARMS  DD *
    DB2REL=1315,IDP=Y;
    /*
    //REQS   DD *
    TYPE=R, NAME=BP0,PRIV=USE,GRANTEES='TSTIDA,TSTIDB',BY=IDA;
    NAME=BP0,PRIV=USE,GRANTEES='TSTIDA, TSTIDB',BY=IDB;
    /*
    Because the second statement omits TYPE, it is processed with
    TYPE=R from the previous statement.
  - The batch revoke impact report program does not accept TYPE A
    (variable).
  - When the revoke impact report for a global variable is
    generated from ISPF panel ADBPRGV, and the Db2 zparm
    REVOKE_DEP_PRIVILEGES has the value NO, unexpected message
    ADBRI002 is displayed:
    ADBRI002 INCLUDING DEPENDENT PRIVILEGES is not allowed with
    the current ZPARM value
  
  Keywords: BYALL REVOKE
  

Problem conclusion

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI99660

Modules/Macros

• ADB2RD   ADB2RE   ADB2RF   ADB2RG   ADB2RH   ADB2RK   ADB2RL
  ADB2RO   ADB2RP   ADB2RQ   ADB2RR   ADB2RS   ADB2RZ   ADBPRGV
  ADBRIP9  ADBRIPB
  

Fix information

• Fixed component name

  DB2 ADMIN TOOL

• Fixed component ID

  568851500

Applicable component levels

• RD10 PSY UI99660

     UP25/01/18 P F501  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.