DB2 - Problem description
Problem IC67008 | Status: Closed |
SECURITY: SYSTEM GRANTED PRIVILEGES NOT REGENERATED ON VIEWS WHE NAUTO_REVAL IS SET TO IMMEDIATE | |
product: | |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 | |
Problem description: | |
When a view is created on a base object, such as a table or another view, there is a set of privileges granted by the database manager to the definer of the dependent view. If the AUTO_REVAL database configuration parameter is set to IMMEDIATE, then system privileges are supposed to be re-granted for the owner of the view when the base object is recreated, however, they are not. | |
Problem Summary: | |
**************************************************************** * USERS AFFECTED: * * All DB2 Version 9.7 GA through to Fix Pack 1 servers on * * Linux, Unix and Windows environments running with AUTO_REVAL * * set to IMMEDIATE. * **************************************************************** * PROBLEM DESCRIPTION: * * System privileges on views dependent on base objects do not * * have privileges re-granted when the base objects are * * redefined. * **************************************************************** * RECOMMENDATION: * * Set AUTO_REVAL database configuration parameter to DEFERRED * * while performing maintenance on objects. Otherwise, ensure * * to always drop and recreate dependent views when base * * objects are redefined, or apply DB2 Version 9.7 Fix Pack 2 * * to obtain the fix. * **************************************************************** | |
Local Fix: | |
Set AUTO_REVAL database configuration parameter to DEFERRED while performing maintenance on objects. Otherwise, recreate the dependent view to pick up the correct system granted privileges. | |
available fix packs: | |
DB2 Version 9.7 Fix Pack 2 for Linux, UNIX, and Windows | |
Solution | |
Problem is first fixed in DB2 Version 9.7 Fix Pack 2 and all subsequence Fix Packs. | |
Workaround | |
not known / see Local fix | |
BUG-Tracking | |
forerunner : APAR is sysrouted TO one or more of the following: IC67034 follow-up : | |
Timestamps | |
Date - problem reported : Date - problem closed : Date - last modified : | 09.03.2010 26.04.2010 20.05.2010 |
Problem solved at the following versions (IBM BugInfos) | |
9.7.FP2 | |
Problem solved according to the fixlist(s) of the following version(s) | |
9.7.0.2 |