[prev in list] [next in list] [prev in thread] [next in thread] 

List:       racf-l
Subject:    Re: Question on Dataset Access
From:       Bob Bridges <robhbridges () GMAIL ! COM>
Date:       2017-08-31 22:20:38
Message-ID: 037a01d322a7$60c4a820$224df860$ () gmail ! com
[Download RAW message or body]

Yeah, I agree.  (Is there any sillier wasted exercise than saying "I =
agree with Walt"?)  If it says IKJ6500I COMMAND XXX NOT FOUND then it =
isn't RACF; it's simply looking through the SYSPROC and SYSEXEC =
concatenations and not finding a member named XXX.

So the production ID must not have that library in its SYSPROC or =
SYSEXEC concatenation.

You say "the ISPF Library the member resides in - SYS1.CLIST" and then =
"...the my data set that contains the REXX"; is this REXX module in =
SYS1.CLIST or is it somewhere else?  (I'd be a little surprised that =
~any~ ID wouldn't already have read access to something named =
SYS1.CLIST.)

And by the way, who is this really?  Lizette Koehler has a long history =
of writing real sentences.  How early did you have to get up this =
morning, anyway?

---
Bob Bridges
  robhbridges@gmail.com, cell 336 382-7313
  rbridges@InfoSecInc.com

/* Question:  Would you rather raise a child who grows up to be (a) an =
honest, ethical, family-centered person who works on an assembly line or =
(b) a habitually dishonest, amoral narcissist who is the CEO of a big =
corporation?  If your answer is (a), then answer this:  Which child =
would you brag about more?  -John K Resemond, "Who's in Charge Around =
Here?"; United Airlines' magazine "Hemispheres", Sep 1999 */


-----Original Message-----
From: RACF Discussion List [mailto:RACF-L@LISTSERV.UGA.EDU] On Behalf Of =
Walt Farrell
Sent: Thursday, August 31, 2017 08:51

If it were RACF-related you should also have ICH408I or other RACF =
messages to help explain it.

What do you mean by "If I grant READ ... it is better"? Better in what =
way?

If it's a REXX exec try turning a trace on at the start of the exec so =
you can see what is failing.

--- On 8/31/2017 5:28 AM, Lizette Koehler wrote:
> I have written a very simple extact of a text file on z/OS with REXX.
>
> When I run it under my TSO ID everything works.
>
> When I run it under the production id - I get COMMAND NOT FOUND =
(IKJ56500I)
>
> I have tried using IKJEFT01, IRXJCL.  Same results with the production =
ID.
>
> I do not see anything obvious with the two IDs and the ISPF Library =
the member resides in - SYS1.CLIST.
>
> If I grant READ access to the production ID to the my data set that =
contains the REXX, it is better.
>
> The UACC(READ) for the dataset SYS1.CLIST.  The ACL has ID(*) READ  - =
so I am thinking it should work.
>
> So, in my limited knowledge of RACF, I am wondering if something like =
PAD or GAT could be interfering?
>
> How can I display the entries for PAD or GAT for this dataset for =
SYS1.CLIST.
[prev in list] [next in list] [prev in thread] [next in thread]