RC/Migrator : RO034 RO034E You do not have authority to update this model.
Article ID: 245845
Updated On:
Products
RC/Migrator for DB2 for z/OS
Issue/Introduction
When attempting to update a model the user receives an RO034E message saying they don't have the authority to update the model.
RO034 RO034E You do not have authority to update this model.
Environment
DB2 for Z/OS
Release : R20
Cause
The model does not have a SHARE OPTION of "U" set by the creator of the model.
Field: SO
Description: This is a column heading indicating the Share Option field within each line of the displayed list.
The SO (Share Option) is an output-only field that contains a single character value indicating the authorization for other users to use or update the model ID.
Values: Y - Yes. Other users can use the model ID, but cannot update or delete it.
U - Update. Other users can use and update the model ID.
N - No/None. Other users have no authorization. The model ID is hidden from other users and will not show in selection lists.
Others users cannot see, reference, update or delete the model ID.
Resolution
Normally if these models have a Share Option of "N" they are not even visible unless your own userid has ADMIN privileges in hlq.CDBAPARM(MIGRATOR).
So, in this case the user would be trying to update a model that has SHARE OPTION set to "Y". This means it can be seen but not updated or deleted.
In order to be able to update or delete the model your own userid must have ADMIN privileges in hlq.CDBAPARM(MIGRATOR).
This can be done via the EP Edit Parmlib Member, MIGRATOR function from the main menu.
------------------------ Edit Parmlib Member MIGRATOR -----------------------
OPTION ===>
Device type for space calc...> 3390 (3380 or 3390)
Analysis PDS share option....> Y (Y/N) Analysis Viewscan option.....> N (Y/N)
Specify VSAM CATALOG parm....> N (Y/N) Specify VSAM SMS volumes.....> N (Y/N)
Use FULLTREE BUILD?..........> N (Y/N) Qualified TABAUTH retrieval..> N (Y/N)
Generate toleration msgs?....> Y (Y/N) ORDER BY for UNLOAD..........> N (Y/N)
SET TERMINATOR character.....> ;
Specify HLVLPFIX.............> TSDUMP APF Authorized Prefix or ' '
DB2 subsystem................> yssd
PDS option...................> N (Y or N)
Migrator Catalog PDS name..>
Vol Ser....................> (If not cataloged)
MAXTHREADS option............> 16 (Maximum concurrent threads)
ADMINID option...............> YOURID (Administrator user id)
Routine DBNAME...............> CADB2RCM (Used to create routines
Routine buffer pool..........> BP32K which accept tables
Routine TABLE-CREATOR........> CADB2RCM as parameters)
RMRSSP Data..................>
Additional Subsystems........> N (Y or N)
Press PF1 for help. Press ENTER to continue. Type Cancel/Main/Exit to quit.
This will be allowed only if you also have the authority to update the hlq.CDBAPARM dataset.
In the HLQ.CDBAPARM(MIGRATOR) member it looks like this:
/*------------------------------------------------------------------*/
/* THE FOLLOWING SECTION CAN BE REPEATED FOR EACH DB2 SUBSYSTEM. */
/* EACH SSID ENTERED IN THIS MEMBER SHOULD HAVE A CORRESPONDING */
/* SSID ENTRY IN THE 'SETUP' MEMBER. */
/* */
/* SSID : DB2 SUBSYSTEM NAME */
/* PDSDSN : IF YOU WISH TO USE THE PDS OPTION, ENTER THE */
/* DATASET NAME THAT WILL CONTAIN THE UNLOADED CATALOG */
/* FOR THE SSID ABOVE. */
/* PDSVOL : VOLSER OF THE PDS (IF IT IS NOT CATALOGED) */
/*------------------------------------------------------------------*/
SSID (yssd) /* SUBSYSTEM ID */
PDSDSN ()
/* RC/MIGRATOR PDS DATA SET NAME */
PDSVOL () /* VOLSER (IF PDS NOT CATALOGED) */
MAXTHREADS (16) /* MAX # OF CONCURRENT THREADS */
ADMINID (YOURID) /* RCM ADMINISTRATOR USER ID */
RTNDBNAME (CADB2RCM) /* RCM ROUTINE DATABASE NAME */
RTNBP (BP32K) /* RCM ROUTINE BUFFER POOL NAME */
RTNTBCR (CADB2RCM) /* RCM ROUTINE TABLE CREATOR */
RMRSSP () /* SUBSYSTEM TAG IDENTIFIER */
/*------------------------------------------------------------------*/
/* END OF SPECIFICATION FOR YSSD SSID */
/*------------------------------------------------------------------*/
NOTE that the setting of the ADMINID value is SSID specific so is true only for that subsystem. Other subsystem blocks would be appended as required.
Make sure that the hlq.CDBAPARM is itself protected from unauthorized changes as this function allows a user to get around the SHARE OPTION if they can get to the MIGRATOR member.
These models may need to be merely made visible to other users by changing the SHARE OPTION to "U". This would then allow these to be TEMPLATED or UPDATED by others without the need to create them again.
Feedback
Yes
No
Powered by
