TSS7100E 070 J=job A=acid T=N/A F=facility - UNDEFINED ACID With Top Secret For DB2

Products

• Top Secret
• Top Secret - LDAP
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

TSS7100E 070 J=job A=acid T=N/A F=facility - UNDEFINED ACID

is issued when an application developer or user invokes one of the UAF DB2 SPs created by 'acid' in the above TSS7100E message and this acid is no longer a valid TSO ID.

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

The requirement for the owner's access is being generated by DB2. Top Secret for DB2 is generating a similar security check based on that. The creator for the user-defined function may need to be changed if that is found to be the case. Or perhaps there is a need to alter the procedure to change the owner.

If the stored procedures are using UDFs (User Defined Functions) under the stored procedure. DB2 documents that the owner (definer) of the function has its access checked:

=====
User-defined function packages and trigger packages: If a stored procedure or any application under the stored procedure invokes a user-defined function, DB2 requires only the owner (the definer), and not the invoker of the user-defined function, to have EXECUTE authority on the user-defined function package. However, the authorization ID or role of the SQL statement that invokes the user-defined function must have EXECUTE authority on the function.
=====