IBM Mainframe Forum

Posted: **Wed Sep 18, 2013 2:52 pm**

Hello,

when i try to delete sysout job by TWS with this commande REXX :

Select all

ADDRESS SDSF "ISFACT H TOKEN('"TOKEN.IX"') PARM(NP P)"

after the commande :

Select all

TSO PROFILE WTPMSG

There is this message in the log :

Select all

ICH70001I OPC LAST ACCESS AT 10:47:41 ON WEDNESDAY, SEPT
2013
$HASP373 VTESTSB1 STARTED - INIT 37 - CLASS O - SYS V012
IEF403I VRESTQ - STARTED - TIME=10.48.20
ICH408I USER(OPC ) GROUP(UXCP ) NAME(OPC
VGCS.UTRU200..JOB03445.GROUP.1 CL(JESSPOOL) INSUFFICIENT ACCESS AUTHORITY
FROM *.*.*.*.GROUP*.* (G)
ACCESS INTENT(ALTER ) ACCESS ALLOWED(NONE )
ISF015I SDSF COMMAND ATTEMPTED '$COJ(3445),OUTGRP=1.1.1
' OPC REXX

How could i resolve it ?

Thank's for your help.

Posted: **Wed Sep 18, 2013 3:21 pm**

VGCS.UTRU200..JOB03445.GROUP.1 CL(JESSPOOL) INSUFFICIENT ACCESS AUTHORITY

How could i resolve it ?

by contacting Your security group :mrgreen:

Posted: **Wed Sep 18, 2013 3:59 pm**

Mr. Sorrichetti is correct. User OPC does not have the authority to cancel the output group. The RACF profile is JESSPOOL/*.*.*.*.GROUP*.* Site security will have to update that profile or add a more specific profile. Finally they may tell you it's not something that should be allowed. I won't try to guess how they will respond. They may even delete the profile!

Posted: **Wed Sep 18, 2013 5:55 pm**

Hello,

i a m allow to do it by my own user. But whne the job is submited by TWS, it doesn't work.

There is a membre in the parmlib (ISFPRMUU) where i can see diffent group with that definition :

Select all

/**********************************************/
/* GROUP XDTU */
/**********************************************/
GROUP AUPDT(2),
ILPROC(PROCXDTU),
ACTION(ALL),
AUTH(I,O,H,DA,PREF,INPUT,LOG,FINDLIM),
CMDAUTH(GROUP),
CMDLEV(4),
CONFIRM(ON),
CURSOR(ON),
DADFLT(IN,OUT,TRANS,JOB),
DSPAUTH(GROUP),
GPREF(XDTU*),
HFIELDS(HELDUTA),
IFIELDS(INUT),
ILOGCOL(1),
LANG(ENGLISH),
PREFIX(GROUP),
VIO(SYSALLDA)

/**********************************************/

XDTU is my RACF Group.

And i notice the TWS RACF Group is not defined in this member. It should be in, don't you think so ?

Posted: **Wed Sep 18, 2013 6:46 pm**

Hello,

Suggest you ask your manager or the security admins why this is set up like this.

Might be that no one has recognized this before.

Posted: **Wed Sep 18, 2013 7:11 pm**

dick scherrer wrote:Might be that no one has recognized this before.

i think so...

Posted: **Thu Sep 19, 2013 1:42 pm**

Remember - your userid is NOT TWS's userid. Different authorities therefore apply.

IBM Mainframe Forum

SDSF autorization

SDSF autorization

Re: SDSF autorization

Re: SDSF autorization

Re: SDSF autorization

Re: SDSF autorization

Re: SDSF autorization

Re: SDSF autorization