ICH408I INSUFFICIENT ACCESS AUTHORITY and SELECT privilege missing for PTI.PTMG1_STRAT_0200

Products

• RC/Migrator for DB2 for z/OS

Issue/Introduction

After applying maintenance users now receive insufficient access authority messages when accessing RC/Migrator Strategy Services.

ICH408I USER(userid) GROUP(groupname) NAME(uer-name)  PTI.PTMG1_STRAT_0200.SELECT CL(class-name)
  Insufficient Access Authority
  FROM generic-profile-name(G) 
  ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )

DSNT404I SQLCODE = 4726, WARNING:  THE STATEMENT WAS SUCCESSFULLY PREPARED, 
         BUT IT CANNOT BE EXECUTED BECAUSE authorization-ID DOES NOT
         HAVE SELECT PRIVILEGE ON OBJECT PTI.PTMG1_STRAT_0200 BUT HAS EXPLAIN PRIVILEGE

Environment

Release : 20.0

Resolution

The DYNAMICRULES bind option for the relevant package for Strategy Services has changed to BIND.  Previously it was defaulting to RUN. 

Prior to the maintenance when the option was RUN, the authorization IDs used were those of the users (the IDs that initially connected to Db2). 

Now with DYNAMICRULES BIND, the authorizations of the package Owner is used. 

Grant the package Owner EXECUTE authority on the RC/Migrator product packages and plans.

Additional Information

Refer to Product Authorizations Facility documentation for further details.