Page 1 of 2 12 LastLast
Results 1 to 15 of 19
  1. #1
    Join Date
    Jan 2011
    Posts
    32

    Smile Unanswered: authorizations for Schema user ?

    Hello All,

    Getting the following error message in the system logs

    am using SAP Application with DB2 as database

    SAPSR3 is a schema user of SAP

    Database server = DB2/AIX64 9.7.3

    Error message:

    > SQL0551N "SAPSR3" does not have the required authorization


    When searched about the above error

    found the Following


    SQL0551N represents: authorization-ID does not have the required authorization or privilege to perform operation operation on object object-name

    User Response:

    Ensure that authorization-ID has the authorization necessary to perform the operation.

    Federated system users: this authorization can be at the federated server, the data source, or both.

    If the DB2 utility programs need to be rebound to the database, the database administrator can accomplish this by issuing one of the following CLP command from the bnd subdirectory of the instance, while connected to the database:

    * "DB2 bind @db2ubind.lst blocking all grant public" for the DB2 utilities.
    * "DB2 bind @db2cli.lst blocking all grant public" for CLI.

    sqlcode : -551

    sqlstate : 42501

    ===============================

    Please suggest actions to take for the above error ?


    also, how to check the authorizations available for the schema users in the DB2 Database

    Regards

  2. #2
    Join Date
    Apr 2006
    Location
    Belgium
    Posts
    2,514
    Provided Answers: 11
    -551 missing authority
    check for which operation : select / execute ....
    all authority are available in
    syscat.tabauth and other..
    see
    SYSCAT.TABAUTH catalog view
    Best Regards, Guy Przytula
    Database Software Consultant
    Good DBAs are not formed in a week or a month. They are created little by little, day by day. Protracted and patient effort is needed to develop good DBAs.
    Spoon feeding : To treat (another) in a way that discourages independent thought or action, as by overindulgence.
    DB2 UDB LUW Certified V7-V8-V9-V9.7-V10.1-V10.5 DB Admin - Advanced DBA -Dprop..
    Information Server Datastage Certified
    http://www.infocura.be

  3. #3
    Join Date
    Aug 2001
    Location
    UK
    Posts
    4,650
    You should be checking the SAP manuals to know what authorization SAPSR3 must have and grant them.
    (or)
    try this question in SDN

    HTH

    Sathyaram
    Visit the new-look IDUG Website , register to gain access to the excellent content.

  4. #4
    Join Date
    Jan 2011
    Posts
    32
    Hi Sathyaram,

    You are Right, Searching where to get, how to find the available

    authorizations for the user SAPSR3


    Regards

  5. #5
    Join Date
    Aug 2001
    Location
    UK
    Posts
    4,650
    You had two questions
    Please suggest actions to take for the above error ?


    also, how to check the authorizations available for the schema users in the DB2 Database
    Guy has answered the second one.
    I did for the first one.

    how to find the available authorizations for the user SAPSR3
    See Guy's response

    Hope this helps

    Sathyaram
    Visit the new-look IDUG Website , register to gain access to the excellent content.

  6. #6
    Join Date
    Aug 2001
    Location
    UK
    Posts
    4,650
    You had two questions
    Please suggest actions to take for the above error ?


    also, how to check the authorizations available for the schema users in the DB2 Database
    Guy has answered the second one.
    I did for the first one.

    how to find the available authorizations for the user SAPSR3
    See Guy's response

    Hope this helps

    Sathyaram
    Visit the new-look IDUG Website , register to gain access to the excellent content.

  7. #7
    Join Date
    Jan 2011
    Posts
    32
    @Guy -Thanks for the response , But

    @ Sathyaram -- I did Check Guys link in the response and tried to check in the following way , but did not get any out put for the sql statement



    hostname:db2P2A 3>db2 select * from sapsr3.SYSCAT.TABAUTH;

    since SAPSR3 is the schema

    Since I get the output for the Following sql , I tried the above sql on SYSCAT.TABAUTH

    >db2 select mandt from sapsr3.T000;

    MANDT
    ---------
    000
    001
    010
    080
    090
    066

    Any other forum for db2 for sap perspective

    Regards

  8. #8
    Join Date
    Aug 2001
    Location
    UK
    Posts
    4,650
    Quote Originally Posted by sidharthmellam View Post

    hostname:db2P2A 3>db2 select * from sapsr3.SYSCAT.TABAUTH;

    since SAPSR3 is the schema

    Since I get the output for the Following sql , I tried the above sql on SYSCAT.TABAUTH

    >db2 select mandt from sapsr3.T000;

    MANDT
    ---------
    000
    001
    010
    080
    090
    066

    Code:
    select * from syscat.tabauth where grantee='SAPSR3'
    This will give you the list of tables which SAPSR3 has been granted direct access.

    Any other forum for db2 for sap perspective
    I mentioned that as well before ;-) . It is SDN - DB6 .
    For SAP & DB6 , you will get better info there - including usage of DBA Cockpit etc. And of course, you can use other forums on the site for you SAP questions also.

    If you have any DB2 [ or DB6 in SAP language ] specific question , feel free to come back here.
    Visit the new-look IDUG Website , register to gain access to the excellent content.

  9. #9
    Join Date
    Jan 2011
    Posts
    32
    Sathyaram,

    Thanks for the response

    The sql query am looking is to check , the existing previlages of SAPSR3 with this

    I can compare in the other system if missing than provide it

    Than i would be needing the sql to grant it ,

    I have gone through an sdn link, which tells like this

    i e

    SAP Community Network Forums: DB2 Database Error - SQL0551N - SAPDEV ...

    Check sivakumars comment here at the end of the page


    Also the link

    SAP Community Network Forums: DBA Cockpit ...

    Just wanted to know the Forum Rules in dbforums, is it ok ? to paste the link of other forums


    Regards


    Regards

  10. #10
    Join Date
    Aug 2001
    Location
    UK
    Posts
    4,650
    No problems pasting links from other forums , as long as is technical and relevant to the topic being discussed.

    ==
    Visit the new-look IDUG Website , register to gain access to the excellent content.

  11. #11
    Join Date
    Aug 2001
    Location
    UK
    Posts
    4,650
    Always check the version as well. What is valid in a previous version of db2 may not be valid in 9.7.3 .
    But in your case (9.7.3) Siva Kumar's response is technically valid.

    =
    Visit the new-look IDUG Website , register to gain access to the excellent content.

  12. #12
    Join Date
    Jan 2011
    Posts
    32
    @Guy, I did try the SYSCAT.TABAUTH catalog view but unable to locate the
    SAPSR3 and the available previlages for it

    Could you tell me exactly how to check the previlages for the SAPSR3 user


    Hello All,


    Apart from the above , Any Response to my question , that how to check the previlages for the schema user SAPSR3 in db2 database

    Regards

  13. #13
    Join Date
    Aug 2008
    Location
    Toronto, Canada
    Posts
    2,367

  14. #14
    Join Date
    Apr 2006
    Location
    Belgium
    Posts
    2,514
    Provided Answers: 11
    sapr3 may be dbadmin or sysadmin
    look in dbauth table or in sysadm group..
    Best Regards, Guy Przytula
    Database Software Consultant
    Good DBAs are not formed in a week or a month. They are created little by little, day by day. Protracted and patient effort is needed to develop good DBAs.
    Spoon feeding : To treat (another) in a way that discourages independent thought or action, as by overindulgence.
    DB2 UDB LUW Certified V7-V8-V9-V9.7-V10.1-V10.5 DB Admin - Advanced DBA -Dprop..
    Information Server Datastage Certified
    http://www.infocura.be

  15. #15
    Join Date
    Jan 2011
    Posts
    32
    The Following could be possible solution

    db2 grant execute on function SYSPROC.MON_GET_TABLESPACE to SAPSR3


    This i get from a remote colleague

    is that ok to execute this on a prod box ?

    Regards

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •