DB2 Masking fails with SQLCODE=-551 Authorization Error

Products

• CA Test Data Manager (Data Finder / Grid Tools)

Issue/Introduction

When triggering a DB2 masking job (e.g., for the GCIS application), the job fails immediately. The logs contain the following error:

com.ibm.db2.jcc.am.SqlSyntaxErrorException: DB2 SQL Error: SQLCODE=-551, SQLSTATE=42501, SQLERRMC=[USERID];UPDATE;[TABLE_NAME]

Environment

• CA Test Data Manager
• Fast Data Masker
• Target Database: IBM DB2

Cause

The error SQLCODE=-551 is a DB2 authorization error. It indicates that the user ID defined in the Connection Profile does not have the necessary privileges (specifically the UPDATE privilege) to perform the masking operation on the target table.

Resolution

To resolve this issue, update the connection profile with a user ID that has the required permissions:

1. Identify the user ID currently used in the Connection Profile for the affected application.
2. Work with your Database Administrator (DBA) to verify that this user ID has SELECT and UPDATE permissions on the tables being masked.
3. Alternatively, update the Connection Profile in TDM/FDM with a different user ID that already possesses the required database privileges.
4. Test the Connection Profile to ensure successful authentication.
5. Rerun the masking job.