DB2 - Problem description
Problem IC90835 | Status: Closed |
SQL FUNCTION DEFINER NOT GIVEN WITH GRANT OPTION (CAN LEAD TO ERRORS LIKE SQL0551N ON LATER GRANT) | |
product: | |
DB2 FOR LUW / DB2FORLUW / 970 - DB2 | |
Problem description: | |
The definer of a SQL function should be given the WITH GRANT OPTION on the function if the definer has WITH GRANT OPTION on all privileges required to define the function, or if the definer has SYSADM or DBADM authority. However, if all of the following conditions are true, the definer is incorrectly given only EXECUTE privilege without the WITH GRANT OPTION: - The SQL function is inlined - The function definer does not have SYSADM or DBADM authority - SQL function body references one or more procedures - The function definer has the WITH GRANT OPTION on all referenced procedures This can lead to errors like SQL0551N when trying to GRANT privileges on such a function. With the conditions above all true you would see that the created function privileges in SYSCAT.ROUTINEAUTH would show a 'Y' for the 'EXECUTEAUTH' column instead of a 'G'. | |
Problem Summary: | |
**************************************************************** * USERS AFFECTED: * * All * **************************************************************** * PROBLEM DESCRIPTION: * * See Problem Description above. * **************************************************************** * RECOMMENDATION: * * Upgrade to DB2 Version 9.7 Fix Pack 9. * **************************************************************** | |
Local Fix: | |
Explicitly grant EXECUTE privilege WITH GRANT OPTION to the function definer | |
available fix packs: | |
DB2 Version 9.7 Fix Pack 9 for Linux, UNIX, and Windows | |
Solution | |
Fixed in DB2 Version 9.7 Fix Pack 9. | |
Workaround | |
not known / see Local fix | |
BUG-Tracking | |
forerunner : APAR is sysrouted TO one or more of the following: IC91229 IC95715 follow-up : | |
Timestamps | |
Date - problem reported : Date - problem closed : Date - last modified : | 13.03.2013 16.12.2013 16.12.2013 |
Problem solved at the following versions (IBM BugInfos) | |
9.7.FP9 | |
Problem solved according to the fixlist(s) of the following version(s) | |
9.7.0.9 | |
9.7.0.9 |