IBM Support

PM15624: 'Securityadmin' user in SAEM cannot create new logins

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Description:
    -----------------
    SQL Server 2005 US - 9.0.4230
    Rational System Architect - 11.3.0.2
    
    
    In SAEM, user with 'securityadmin' role cannot create new login.
    
    So when we create a new login,
    after validating we have a rights error beacause SAEM fails to r
    emove
    an 'sysadmin' rights.
    
    
    How to reproduce:
    ------------------------------
    
    
    1) In SAEM. Connect to the Server/Login/Add login
    
    2) Give Name 'Test'
    3) Server role tab select securityadmin.
    
    4) Click on Database Access and select one encyclopedia. (check
    out)
    5) Click OK.
    6) You should get the message 'Login test successfully created.'
     But in this case
    it get an error message:
    
    Impossible de mettre ? jour les r?les du serveur. User does not
    have permission to perform this action.
    Code : -2147206257
    
    
    Workaround:
    ------------------
    Using Enterprise Manager instead of SAEM to create users and ass
    ign permissions
    on databases.
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    Error occurs because a role is being removed when the user
    does not have that role
    

Problem conclusion

  • Check to see if role exists, if it does, remove it
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM15624

  • Reported component name

    TLOGIC SYS ARCH

  • Reported component ID

    5724V68SA

  • Reported release

    B30

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2010-06-01

  • Closed date

    2010-09-17

  • Last modified date

    2010-09-17

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    TLOGIC SYS ARCH

  • Fixed component ID

    5724V68SA

Applicable component levels

  • RB30 PSN

       UP

[{"Business Unit":{"code":"BU053","label":"Cloud & Data Platform"},"Product":{"code":"SS6RBX","label":"Rational System Architect"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"11.3","Edition":"","Line of Business":{"code":"LOB45","label":"Automation"}}]

Document Information

Modified date:
17 September 2010