IBM Support

PM57925: GRANTS ARE MISSING IN WSL WHEN MASK IS USED IN OC TOOL WHEN WHEN SOURCE IS FROM DDL AND TARGET OBJECTS ARE AUTO SELECTED

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • GRANTs are missing in WSL when MASK is used in OC Tool when
    when source is from DDL and target objects are auto selected
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of the DB2 Object Comparison Tool for  *
    *                 z/OS who run Compare to add source only      *
    *                 objects and their authorizations to target.  *
    *                 Masking on authorization IDs are used        *
    *                 during the Compare process.                  *
    ****************************************************************
    * PROBLEM DESCRIPTION: In DB2 Object Comparison Tool for z/OS, *
    *                      when new object is added from source to *
    *                      target, the authorizations on the       *
    *                      source object will be copied to the     *
    *                      target as well.  However, when masking  *
    *                      is used and the grantor and grantee     *
    *                      are masked to the same authorization    *
    *                      ID, the GRANT statement will not be     *
    *                      generated because grantor and grantee   *
    *                      are the same.  In this case, Compare    *
    *                      still issues following message          *
    *                      indicating the authorizations from      *
    *                      the source will be copied to the        *
    *                      target,  which is an incorrect          *
    *                      behavior:                               *
    *                                                              *
    *                      Authorizations for >object_type<        *
    *                      >object_name< will be copied            *
    *                      from source                             *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    In DB2 Object Comparison Tool for z/OS, when a new object is
    added from source to target, the authorizations on the source
    object will be copied to the target as well. However, when
    masking is used and the grantor and grantee are masked to the
    same authorization ID, the GRANT statement will not be
    generated because grantor and grantee are the same.  In this
    case, Compare still issues the following message indicating
    the authorizations from the source will be copied to the
    target, which is an incorrect behavior.
    
    Authorizations for >object_type< >object_name< will be copied
    from source.
    

Problem conclusion

  • Problem has been resolved.  For source only objects which are
    added to target by Compare, when some authorization from source
    is not copied to target because of the masking definition, the
    following warning message will be displayed:
    
    ADB7106W: Source authorizations for >object_type<
    >object_name< will not be copied to target completely
    because grantor and grantee are the same. Problem
    probably caused by masking.
    
    When all the authorizations from source are not copied to
    target because of the masking definition, then the
    following warning message will be displayed:
    
    ADB7106W: All authorizations for >object_type<
    >object_name<  will not be copied to target
    completely because grantor and grantee are
    the same. Problem probably caused by masking.
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM57925

  • Reported component name

    DB2 OBJECT COMP

  • Reported component ID

    5697G6400

  • Reported release

    A10

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2012-02-10

  • Closed date

    2012-04-26

  • Last modified date

    2012-05-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Modules/Macros

  •    ADB2CMR  ADB7000
    

Fix information

  • Fixed component name

    DB2 OBJECT COMP

  • Fixed component ID

    5697G6400

Applicable component levels

  • RA10 PSY UK78295

       UP12/04/28 P F204

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSAUVH","label":"IBM Db2 Object Comparison Tool for z\/OS"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"10.1.0","Edition":"","Line of Business":{"code":"LOB10","label":"Data and AI"}}]

Document Information

Modified date:
12 February 2021