DB2 - Problembeschreibung
Problem IC90835 | Status: Geschlossen |
SQL FUNCTION DEFINER NOT GIVEN WITH GRANT OPTION (CAN LEAD TO ERRORS LIKE SQL0551N ON LATER GRANT) | |
Produkt: | |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 | |
Problembeschreibung: | |
The definer of a SQL function should be given the WITH GRANT OPTION on the function if the definer has WITH GRANT OPTION on all privileges required to define the function, or if the definer has SYSADM or DBADM authority. However, if all of the following conditions are true, the definer is incorrectly given only EXECUTE privilege without the WITH GRANT OPTION: - The SQL function is inlined - The function definer does not have SYSADM or DBADM authority - SQL function body references one or more procedures - The function definer has the WITH GRANT OPTION on all referenced procedures This can lead to errors like SQL0551N when trying to GRANT privileges on such a function. With the conditions above all true you would see that the created function privileges in SYSCAT.ROUTINEAUTH would show a 'Y' for the 'EXECUTEAUTH' column instead of a 'G'. | |
Problem-Zusammenfassung: | |
**************************************************************** * USERS AFFECTED: * * All * **************************************************************** * PROBLEM DESCRIPTION: * * See Problem Description above. * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 9.7 Fix Pack 9. * **************************************************************** | |
Local-Fix: | |
Explicitly grant EXECUTE privilege WITH GRANT OPTION to the function definer | |
verfügbare FixPacks: | |
DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows | |
Lösung | |
Fixed in DB2 Version 9.7 Fix Pack 9. | |
Workaround | |
keiner bekannt / siehe Local-Fix | |
Bug-Verfolgung | |
Vorgänger : APAR is sysrouted TO one or more of the following: IC91229 IC95715 Nachfolger : | |
Weitere Daten | |
Datum - Problem gemeldet : Datum - Problem geschlossen : Datum - der letzten Änderung: | 13.03.2013 16.12.2013 16.12.2013 |
Problem behoben ab folgender Versionen (IBM BugInfos) | |
9.7.FP9 | |
Problem behoben lt. FixList in der Version | |
9.7.0.9 | |
9.7.0.9 |