IC85808: SYSINSTALLOJECTS may fail to create SECURED Triggers on POLICY table

DB2 Version 10.1 Fix Pack 2 for Linux, UNIX, and Windows

APAR status

• Closed as program error.

Error description

• Starting with DB2 V10.1 triggers on POLICY table are created
  with option SECURED.
  This requires the user running procedure SYSINSTALLOBJECTS to
  have SECADM or CREATE_SECURE_OBJECT authority on the database.
  
  Without these authorities granted to the user the procedure
  SYSINSTALLOBJECTS will not create all the needed triggers on the
  POLICY table.
  The procedure call itself will return successfully, hence giving
  no indication of missing objects.
  
  But subsequent actions like the attempt to verify the POLICY
  table or retrieving a policy will result in error SQL0438N or
  SQL1439N as shown below:
  
  db2 "call sysproc.sysinstallobjects( 'POLICY', 'V',
  'SYSTOOLSPACE', 'SYSTOOLS' )"
  SQL0438N  Application raised error or warning with diagnostic
  text: "POLICY
  INVALID".  SQLSTATE=3900
  
  db2 "call sysproc.automaint_get_policyfile(
  'MAINTENANCE_WINDOW', 'maintenance_window.xml' )"
  SQL1439N  Could not retrieve automated maintenance policy
  configuration
  information.  SQLSTATE=3900
  

Local fix

• - grant either SECADM or CREATE_SECURE_OBJECT authority to the
  user who is creating the POLICY table
  

Problem summary

• ****************************************************************
  * USERS AFFECTED:                                              *
  * All                                                          *
  ****************************************************************
  * PROBLEM DESCRIPTION:                                         *
  * See Error Description                                        *
  ****************************************************************
  * RECOMMENDATION:                                              *
  * Upgrade to DB2 Version 10.1 Fix Pack 2.                      *
  ****************************************************************
  

Problem conclusion

• First fixed in DB2 Version 10.1 Fix Pack 2.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  DB2 FOR LUW

• Fixed component ID

  DB2FORLUW

Applicable component levels

• RA10 PSN

     UP