PM80759: IF THE SUBUSER IS BLANK OR NOT SPECIFIED, THE QMGR'S USERID IS USED INSTEAD OF THE ADMINISTRATOR USERID ISSUING THE COMMAND

A fix is available

Subscribe

You can track all active APARs for this component.

APAR status

  • Closed as program error.

Error description

  • The use of the qmgr's userid when a blank SUBUSER is provided is
    incorrect. It should use the userid of the administrator issuing
    the DEFINE SUB command, as documented.
    .
    The current design is that the administrator's userid (i.e. the
    user issuing the MQSC command) is used if the SUBUSER parameter
    is either not specified or is blank when creating a new
    subscription using DEFINE SUB, as documented in the infocenter
    (under "Defining, altering, and deleting a subscription" at the
    bottom of the page):
    http://publib.boulder.ibm.com/infocenter/wmqv7/v7r0/topic/com.ib
    m.mq.amqnar.doc/ps19550_.htm
    ***
    Additional symptoms:
    ICH408I JOB(CSQ1MSTR) STEP(PROCSTEP) CSQ1.PUBSUB1 CL(MQQUEUE )
      INSUFFICIENT ACCESS AUTHORITY
      FROM CS*.** (G)
      ACCESS INTENT(UPDATE )  ACCESS ALLOWED(NONE   )
    

Local fix

Problem summary

  • ****************************************************************
    * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 *
    *                 Release 0 Modification 1 and Release 1       *
    *                 Modification 0.                              *
    ****************************************************************
    * PROBLEM DESCRIPTION: Authorization failure occurs when       *
    *                      defining or altering a subscription     *
    *                      administratively and specifying a       *
    *                      blank SUBUSER field.                    *
    *                      ICH408I reports insufficient access     *
    *                      authority for JOB(xxxxMSTR)             *
    *                      STEP(xxxxMSTR).                         *
    ****************************************************************
    * RECOMMENDATION:                                              *
    ****************************************************************
    When a subscription is created or altered administratively (for
    example, using the DEFINE SUB or ALTER SUB commands ), and a
    destination queue is specified, a security check is made to
    check that the user associated with the subscription has
    authority to put to the destination queue.
    If SUBUSER is specified with a blank value, an invalid userid
    is used for this check, resulting in an authorization failure
    for the queue manager job and step.
    

Problem conclusion

  • When a blank SUBUSER parameter is specified on a DEFINE SUB or
    ALTER SUB command, the subscription will correctly use the
    userid of the administrator that issued the command for
    determining if the subscription has access to the destination
    queue.
    010Y
    100Y
    CSQMCNSB
    

Temporary fix

Comments

APAR Information

  • APAR number

    PM80759

  • Reported component name

    WMQ Z/OS V7

  • Reported component ID

    5655R3600

  • Reported release

    010

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt

  • Submitted date

    2013-01-16

  • Closed date

    2013-02-13

  • Last modified date

    2013-03-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UK91614 UK91615

Modules/Macros

  • CSQMCNSB
    

Fix information

  • Fixed component name

    WMQ Z/OS V7

  • Fixed component ID

    5655R3600

Applicable component levels

  • R010 PSY UK91614

       UP13/03/01 P F302

  • R100 PSY UK91615

       UP13/03/01 P F302

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.



Rate this page:

(0 users)Average rating

Document information


More support for:

z/OS family

Software version:

7.0.1

Reference #:

PM80759

Modified date:

2013-03-04

Translate my page

Machine Translation

Content navigation