RACF V7R1 & Peoplesoft Views

Melissa Rogers

RACF V7R1 & Peoplesoft Views
We have recently applied the APAR PQ68177 to our DB2 system and now our
RACF for Peoplesoft is not working as intended. My lack of understanding
what the APAR is doing doesn't help matters either!
Currently we have a RACF group id (which contains the peoplesoft instance
accesid) that is used to create all objects for a peoplesoft instance such
as HRDEV. This group id is the owner of the objects and has DBADM
authority as well as some additional authorities. A handful of developers
are connected to this group id so that they too have the ability to
create/drop/etc. objects once they issue the set current sqlid statement.
Now with the APAR, no one is able to drop views and we have had to create
specific profiles to allow inserts, updates, deletes that use to be granted
automatically because of the DBADM authority.
If the group id is the owner, why can't the user ids in the group manage
the view? These are tasks that worked just fine before the APAR was
applied. Now we are receiving -551 errors whenever we try to run the
Peoplesoft scripts to create and administer views. Any help would be
great!!!

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Jeff Frazier

Re: RACF V7R1 & Peoplesoft Views
(in response to Melissa Rogers)
Melissa,
Was OW57299 applied at same time. The hold actions talk about needing
that to go on at same time as well as are you using [login to unmask email] or was this
replaced with RACF exit [login to unmask email] Maybe the actions need reviewed.
HTH
Jeff




Melissa Rogers <[login to unmask email]>
Sent by: DB2 Data Base Discussion List <[login to unmask email]>
12/08/2004 09:26 AM
Please respond to DB2 Database Discussion list at IDUG


To: [login to unmask email]
cc:
Subject: RACF V7R1 & Peoplesoft Views


We have recently applied the APAR PQ68177 to our DB2 system and now our
RACF for Peoplesoft is not working as intended. My lack of understanding
what the APAR is doing doesn't help matters either!
Currently we have a RACF group id (which contains the peoplesoft instance
accesid) that is used to create all objects for a peoplesoft instance such
as HRDEV. This group id is the owner of the objects and has DBADM
authority as well as some additional authorities. A handful of developers
are connected to this group id so that they too have the ability to
create/drop/etc. objects once they issue the set current sqlid statement.
Now with the APAR, no one is able to drop views and we have had to create
specific profiles to allow inserts, updates, deletes that use to be
granted
automatically because of the DBADM authority.
If the group id is the owner, why can't the user ids in the group manage
the view? These are tasks that worked just fine before the APAR was
applied. Now we are receiving -551 errors whenever we try to run the
Peoplesoft scripts to create and administer views. Any help would be
great!!!

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and
home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at
http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email]
Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm


---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Melissa Rogers

Re: RACF V7R1 & Peoplesoft Views
(in response to Jeff Frazier)
Yes, ow57299 was applied at the same time and we are using the RACF exit
[login to unmask email] <mailto:[login to unmask email]> . Any ideas what could be wrong or is it suppose
to work like this and we now need to create specific profiles for all of our
views?

_____

From: Jeff Frazier [mailto:[login to unmask email]
Sent: Wednesday, December 08, 2004 9:54 AM
To: [login to unmask email]
Subject: Re: RACF V7R1 & Peoplesoft Views



Melissa,
Was OW57299 applied at same time. The hold actions talk about needing that
to go on at same time as well as are you using [login to unmask email] or was this replaced
with RACF exit [login to unmask email] Maybe the actions need reviewed.
HTH
Jeff



Melissa Rogers <[login to unmask email]>
Sent by: DB2 Data Base Discussion List <[login to unmask email]>


12/08/2004 09:26 AM
Please respond to DB2 Database Discussion list at IDUG



To: [login to unmask email]
cc:
Subject: RACF V7R1 & Peoplesoft Views



We have recently applied the APAR PQ68177 to our DB2 system and now our
RACF for Peoplesoft is not working as intended. My lack of understanding
what the APAR is doing doesn't help matters either!
Currently we have a RACF group id (which contains the peoplesoft instance
accesid) that is used to create all objects for a peoplesoft instance such
as HRDEV. This group id is the owner of the objects and has DBADM
authority as well as some additional authorities. A handful of developers
are connected to this group id so that they too have the ability to
create/drop/etc. objects once they issue the set current sqlid statement.
Now with the APAR, no one is able to drop views and we have had to create
specific profiles to allow inserts, updates, deletes that use to be granted
automatically because of the DBADM authority.
If the group id is the owner, why can't the user ids in the group manage
the view? These are tasks that worked just fine before the APAR was
applied. Now we are receiving -551 errors whenever we try to run the
Peoplesoft scripts to create and administer views. Any help would be
great!!!

----------------------------------------------------------------------------
-----
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home
page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select
"Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org.
The IDUG List Admins can be reached at [login to unmask email] Find
out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

----------------------------------------------------------------------------
----- Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and
home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page
select "Join or Leave the list". The IDUG DB2-L FAQ is at
http://www.idugdb2-l.org. The IDUG List Admins can be reached at
[login to unmask email] Find out the latest on IDUG conferences at
http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

Jeff Frazier

Re: RACF V7R1 & Peoplesoft Views
(in response to Melissa Rogers)
Melissa, there is a PE against it also. You might want to look at
PQ74313/UQ78353.
Jeff




Melissa Rogers <[login to unmask email]>
Sent by: DB2 Data Base Discussion List <[login to unmask email]>
12/08/2004 10:37 AM
Please respond to DB2 Database Discussion list at IDUG


To: [login to unmask email]
cc:
Subject: Re: RACF V7R1 & Peoplesoft Views



Yes, ow57299 was applied at the same time and we are using the RACF exit [login to unmask email] Any ideas what could be wrong or is it suppose to work like this and we
now need to create specific profiles for all of our views?


From: Jeff Frazier [mailto:[login to unmask email]
Sent: Wednesday, December 08, 2004 9:54 AM
To: [login to unmask email]
Subject: Re: RACF V7R1 & Peoplesoft Views


Melissa,
Was OW57299 applied at same time. The hold actions talk about needing
that to go on at same time as well as are you using [login to unmask email] or was this
replaced with RACF exit [login to unmask email] Maybe the actions need reviewed.
HTH
Jeff




Melissa Rogers <[login to unmask email]>
Sent by: DB2 Data Base Discussion List <[login to unmask email]>

12/08/2004 09:26 AM
Please respond to DB2 Database Discussion list at IDUG


To: [login to unmask email]
cc:
Subject: RACF V7R1 & Peoplesoft Views


We have recently applied the APAR PQ68177 to our DB2 system and now our
RACF for Peoplesoft is not working as intended. My lack of understanding
what the APAR is doing doesn't help matters either!
Currently we have a RACF group id (which contains the peoplesoft instance
accesid) that is used to create all objects for a peoplesoft instance such
as HRDEV. This group id is the owner of the objects and has DBADM
authority as well as some additional authorities. A handful of developers
are connected to this group id so that they too have the ability to
create/drop/etc. objects once they issue the set current sqlid statement.
Now with the APAR, no one is able to drop views and we have had to create
specific profiles to allow inserts, updates, deletes that use to be
granted
automatically because of the DBADM authority.
If the group id is the owner, why can't the user ids in the group manage
the view? These are tasks that worked just fine before the APAR was
applied. Now we are receiving -551 errors whenever we try to run the
Peoplesoft scripts to create and administer views. Any help would be
great!!!

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and
home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at
http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email]
Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm

---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and
home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at
http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email]
Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm


---------------------------------------------------------------------------------
Welcome to the IDUG DB2-L list. To unsubscribe, go to the archives and home page at http://www.idugdb2-l.org/archives/db2-l.html. From that page select "Join or Leave the list". The IDUG DB2-L FAQ is at http://www.idugdb2-l.org. The IDUG List Admins can be reached at [login to unmask email] Find out the latest on IDUG conferences at http://conferences.idug.org/index.cfm