PM80759: IF THE SUBUSER IS BLANK OR NOT SPECIFIED, THE QMGR'S USERID IS USED INSTEAD OF THE ADMINISTRATOR USERID ISSUING THE COMMAND

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• The use of the qmgr's userid when a blank SUBUSER is provided is
  incorrect. It should use the userid of the administrator issuing
  the DEFINE SUB command, as documented.
  .
  The current design is that the administrator's userid (i.e. the
  user issuing the MQSC command) is used if the SUBUSER parameter
  is either not specified or is blank when creating a new
  subscription using DEFINE SUB, as documented in the infocenter
  (under "Defining, altering, and deleting a subscription" at the
  bottom of the page):
  http://publib.boulder.ibm.com/infocenter/wmqv7/v7r0/topic/com.ib
  m.mq.amqnar.doc/ps19550_.htm
  ***
  Additional symptoms:
  ICH408I JOB(CSQ1MSTR) STEP(PROCSTEP) CSQ1.PUBSUB1 CL(MQQUEUE )
    INSUFFICIENT ACCESS AUTHORITY
    FROM CS*.** (G)
    ACCESS INTENT(UPDATE )  ACCESS ALLOWED(NONE   )
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of WebSphere MQ for z/OS Version 7 *
  *                 Release 0 Modification 1 and Release 1       *
  *                 Modification 0.                              *
  ****************************************************************
  * PROBLEM DESCRIPTION: Authorization failure occurs when       *
  *                      defining or altering a subscription     *
  *                      administratively and specifying a       *
  *                      blank SUBUSER field.                    *
  *                      ICH408I reports insufficient access     *
  *                      authority for JOB(xxxxMSTR)             *
  *                      STEP(xxxxMSTR).                         *
  ****************************************************************
  * RECOMMENDATION:                                              *
  ****************************************************************
  When a subscription is created or altered administratively (for
  example, using the DEFINE SUB or ALTER SUB commands ), and a
  destination queue is specified, a security check is made to
  check that the user associated with the subscription has
  authority to put to the destination queue.
  If SUBUSER is specified with a blank value, an invalid userid
  is used for this check, resulting in an authorization failure
  for the queue manager job and step.
  

Problem conclusion

• When a blank SUBUSER parameter is specified on a DEFINE SUB or
  ALTER SUB command, the subscription will correctly use the
  userid of the administrator that issued the command for
  determining if the subscription has access to the destination
  queue.
  010Y
  100Y
  CSQMCNSB
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UK91614 UK91615

Modules/Macros

• CSQMCNSB
  

Fix information

• Fixed component name

  WMQ Z/OS V7

• Fixed component ID

  5655R3600

Applicable component levels

• R010 PSY UK91614

     UP13/03/01 P F302

• R100 PSY UK91615

     UP13/03/01 P F302

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.