PH66900: NEW RACF FACILITY PROFILES TO CONTROL EXPERT OPTIONS IN LOG ANALYSIS TOOL

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• To improve security and provide more flexible access control for
  the Expert options within the Log Analysis tool, two new RACF
  facility class profiles have been introduced:
  ALA.EXPOPT.SPECIC.SSID - controls the access to the Expert
  options on "Generate database activity report (details)" panel
  ALA.EXPOPT.SPECLOGS.SSID - controls the access to the Specify
  Log option on "Generate database activity report (general)"
  panel
  Note: SSID is a placeholder and should be replaced with the
  actual Db2 subsystem identifier used by the customer (e.g.,
  DB2A, DSN1).
  Customers can define these profiles using standard RACF commands
  and assign appropriate permissions to user groups as needed. The
  ACCESS(READ) permission allows the user to use mentioned expert
  options. If the profiles are not defined or a user is not
  authorized to them, access to the corresponding expert options
  will be denied.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of Db2 Log Analysis Tool for z/OS      *
  ****************************************************************
  * PROBLEM DESCRIPTION: To improve security and provide more    *
  *                      flexible access control for the Expert  *
  *                      options within the Log Analysis tool,   *
  *                      two new RACF facility class profiles    *
  *                      have been introduced:                   *
  *                      ALA.EXPOPT.SPECIC.SSID - controls the   *
  *                      access to the Expert options on         *
  *                      "Generate database activity report      *
  *                      (details)" panel.                       *
  *                      ALA.EXPOPT.SPECLOGS.SSID - controls the *
  *                      access to the Specify Log option on     *
  *                      "Generate database activity report      *
  *                      (general)" panel.                       *
  *                                                              *
  *                      Note: SSID is a placeholder and should  *
  *                      be replaced with the actual Db2         *
  *                      subsystem identifier used by the        *
  *                      customer (e.g., DB2A, DSN1).            *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF                                *
  ****************************************************************
  New RACF Facility Profiles to control Expert Options in Log
  Analysis Tool
  

Problem conclusion

• Apply the PTF
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UO03590 UO03591

Modules/Macros

• ALADTL4
  

Fix information

• Fixed component name

  DB2 LOG ANALYSI

• Fixed component ID

  5655E6601

Applicable component levels

• R350 PSY UO03590

     UP25/06/17 P F506

• R360 PSY UO03591

     UP25/07/02 P F506

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.