Skip to main content

IZ55883: SECURITY: USER CAN PERFORM "SET SESSION AUTHORIZATION" WITHOUT SETSESSIONUSER PRIVILEGE.


Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • In a rare and special condition, a user may "SET SESSION
    AUTHORIZATION" without suffiicent privileges.
    

Local fix

  • Avoid granting CONNECT authority to PUBLIC or to user directly.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED:                                              *
    * All DB2 systems on all Linux, Unix and Windows platforms at  *
    * service levels from Version 9.1 GA through to Version 9.1    *
    * Fix Pack 7.                                                  *
    ****************************************************************
    * PROBLEM DESCRIPTION:                                         *
    * See error description.                                       *
    ****************************************************************
    * RECOMMENDATION:                                              *
    * Upgrade to DB2 Version 9.1 Fix Pack 8 or see "Local Fix"     *
    * portion for other suggestions.                               *
    ****************************************************************
    

Problem conclusion

  • This problem exists in DB2 Version 9.1, only.
    The complete fix for this problem first appears in DB2 Version
    9.1 Fix Pack 8 and all the subsequent Fix Packs.
    

Temporary fix

Comments

APAR Information

  • APAR number

    IZ55883

  • Reported component name

    DB2 UDB ESE AIX

  • Reported component ID

    5765F4100

  • Reported release

    910

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2009-07-23

  • Closed date

    2009-10-02

  • Last modified date

    2009-10-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

Fix information

  • Fixed component name

    DB2 UDB ESE AIX

  • Fixed component ID

    5765F4100

Applicable component levels

  • R910 PSN

       UP

Rate this page:

(0 users)Average rating

Copyright and trademark information

IBM, the IBM logo and ibm.com are trademarks of International Business Machines Corp., registered in many jurisdictions worldwide. Other product and service names might be trademarks of IBM or other companies. A current list of IBM trademarks is available on the Web at "Copyright and trademark information" at www.ibm.com/legal/copytrade.shtml.

Rate this page:


(0 users)Average rating

Add comments

Document information

DB2 for Linux, UNIX and Windows


Software version:
910


Reference #:
IZ55883


Modified date:
2009-10-02

Translate my page

Content navigation