When making connections to DB2 on z/OS, SAS^® uses one of two attachment facilities: the Call Attachment Facility (CAF) or the Recoverable Resource Manager Services Attachment Facility (RRSAF).

RRSAF is intended for use with SAS servers. It supports the ability to associate a z/OS authorization identifier with the connection to the database. Authentication is done based on the client's user ID. With CAF, the authentication is done based on the ID under which the server was started.

Starting in SAS^® 9.3, when the system option DB2RRS is in effect, authentication is incorrectly done based on the ID that started the server rather the client's user ID.

Currently, there is no workaround for this issue.

Operating System and Release Information