PK65451: ENHANCEMENT TO THE AUTHORIZATION SWITCHING FUNCTION TO ALLOW RUNNING MODIFIED OR USER-PROVIDED DDL.

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• Enhancement to the authorization switching function
  to allow running modified or user-provided
  DDL statements (non-DML) under the authority of the
  authorization switching userid.
  

Local fix

• APPLY PTF.
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of DB2 Administration Tool V7.2        *
  *                 who use Authorization Switching.             *
  ****************************************************************
  * PROBLEM DESCRIPTION: Enhancement to the authorization        *
  *                      switching function to allow running     *
  *                      modified or user-provided DDL           *
  *                      statements (non-DML) under the          *
  *                      authority of the authorization          *
  *                      switching userid.                       *
  ****************************************************************
  * RECOMMENDATION: APPLY the PTF.                               *
  ****************************************************************
  This APAR extends the authorization switching function to allow
  an authorized user to run modified or user-provided DDL
  statements (non-DML) under the DB2 authority of the
  authorization switching userid. Prior to this APAR, any DDL
  statements that were produced by the product but were modified
  prior to being run, and any user-provided DDL statements were
  performed under the job submitter's DB2 authority.  The product
  would end the authorization switching connection and connect
  with the job submitter's id prior to performing such DDL. With
  this enhancement, authorized users can perform modified or
  user-provided DDL (non-DML) statements performed under the
  authorization switching userid.  In order to use this facility,
  the job submitter must have the equivalent of RACF ALTER
  authority to the profile protecting the authorization switching
  resource.
  

Problem conclusion

Temporary fix

Comments

• New function has been added.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

•    ADBASW   ADBCVCT  ADBRRAC  ADBTEP2  ADB2W1
  ADB27DCA ADB5000  H0IH720J
  

Fix information

• Fixed component name

  DB2 ADMIN TOOL

• Fixed component ID

  568851500

Applicable component levels

• R720 PSY UK38008

     UP08/07/17 P F807

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.