|
Problem IC63571
|
Status: Closed |
CREATE SECURITY LABEL COMMAND ALLOWS IMPROPER SYNTAX |
| product: |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 |
| Problem description: |
The CREATE SECURITY LABEL command allows improper syntax which
allows the command to complete, but not to make the expected
changes to the database. Each component should be specified at
most once in the statement. Values belonging to the same
component should just be separated by comma without
re-specifying the component-name. For example, the following
command would not register 'owner' as a component of this
security label because the second 'COMPONENT mycomponent' is
improper syntax.
db2 "CREATE SECURITY LABEL mysecpolicy.myseclabel COMPONENT
mycomponent 'managers', COMPONENT mycomponent 'owner'" |
| Problem Summary: |
****************************************************************
* USERS AFFECTED: *
* Users who try to create a security label with this specific *
* invalid syntax. *
****************************************************************
* PROBLEM DESCRIPTION: *
* The CREATE SECURITY LABEL command allows improper syntax *
* which allows the command to complete, but not to make the *
* expected changes to the database. Each component should be *
* specified at most once in the statement. Values belonging *
* to the same component should just be separated by comma *
* without re-specifying the component-name. For example, the *
* following command would not register 'owner' as a component *
* of this security label because the second 'COMPONENT *
* mycomponent' is improper syntax. *
* *
* db2 "CREATE SECURITY LABEL mysecpolicy.myseclabel COMPONENT *
* mycomponent 'managers', COMPONENT mycomponent 'owner'" *
****************************************************************
* RECOMMENDATION: *
* Upgrade to v9.7 FP3 to avoid accidentally using improper *
* syntax and having different DDL than you might expect. *
**************************************************************** |
| Local Fix: |
Use the proper syntax, which would only use the COMPONENT
keyword only once for each component:
db2 "CREATE SECURITY LABEL mysecpolicy.myseclabel COMPONENT
mycomponent 'managers', 'owner'" |
| available fix packs: |
DB2 Version 9.7 Fix Pack 3 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 3a for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 4 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 5 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 6 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 7 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 8 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9a for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows
DB2 Version 9.7 Fix Pack 10 for Linux, UNIX, and Windows
|
| Solution |
Use the proper syntax for the CREATE SECURITY LABEL statement.
Starting in v9.7 FP3 the invalid syntax will result in a syntax
error. |
| Workaround |
not known / see Local fix |
| Timestamps |
Date - problem reported :
Date - problem closed :
Date - last modified :
| 05.10.2009
24.09.2010
24.09.2010 |
| Problem solved at the following versions (IBM BugInfos) |
9.7.FP3
|
| Problem solved according to the fixlist(s) of the following version(s) |
| 9.7.0.3
|
 |
| 9.7.0.3
|
|
