[prev in list] [next in list] [prev in thread] [next in thread] 

List:       racf-l
Subject:    Re: VCICSCMD / CCICSCMD
From:       Mautalen Juan Guillermo <jmautalen () ANSES ! GOV ! AR>
Date:       2020-02-27 12:49:12
Message-ID: 8e8f561a00074e998b961615fbbeb806 () ANSESXG1303 ! anses ! gov ! ar
[Download RAW message or body]

Hi Prakash:

Please can you clarify the following point:

What is the NAME of your profile in the VCICSCMD class? 
One thing is the profile NAME and another completely different thing are its MEMBERS \
(those listed under "RESOURCE IN GROUP" on the output of the RLIST command and that \
you add/delete using the "RALTER VCICSCMD profilename ADDMEM()/DELMEM()" command).

Thanks,


Juan G. Mautalen

-----Mensaje original-----
De: RACF Discussion List [mailto:RACF-L@LISTSERV.UGA.EDU] En nombre de Prakash \
Lalaram Enviado el: jueves, 27 de febrero de 2020 09:32 a.m.
Para: RACF-L@LISTSERV.UGA.EDU
Asunto: Re: [RACF-L] VCICSCMD / CCICSCMD

Classification: Public

Good day

Yes it was - The CCICSDM required a RACLIST Refresh and the VCICSCMD the generic was \
sufficient 

Regards 

Prakash Lalaram
Senior Manager
BT Specialist
Tel.:+966-11-204-6600 Ext.: 2235 | Mobile.:+966-56-246-8228 \
prakash.lalaram@riyadbank.com


For clean environment, please avoid unnecessary printing.

-----Original Message-----
From: RACF Discussion List <RACF-L@LISTSERV.UGA.EDU> On Behalf Of Russ Hardgrove
Sent: Wednesday, February 26, 2020 7:18 PM
To: RACF-L@LISTSERV.UGA.EDU
Subject: Re: VCICSCMD / CCICSCMD

Prakash,    I ALWAYS found grouping and member class stuff TOTALLY confusing.   And I \
was IBM RACF lvl2 for 15+ years.    honestly.   

Not certain I agree with (nor understand) Juan's reply  (reread the above "confusing" \
sentence).  

BUT after changing EITHER class (grouping and or member) a RACLIST (not a generic) \
refresh is REQUIRED (if class is RACLISTed).      RACF merges them (again confusing) \
at RACLIST time.    

Was that done?    (after just  the VCICSCMD change)    

Russ Hardgrove   



On Wed, 26 Feb 2020 14:08:40 +0000, Prakash Lalaram <prakash.lalaram@RIYADBANK.COM> \
wrote:

> Classification: Public
> 
> Good Day
> 
> Today we experienced a RACF access error ( See below).  We have a grouping class \
> VCICSCMD and there is a profile called PCIC.*. I added the group DDCALLT as Update \
> access . 
> Refreshed VCICSCMD ( generic Refresh)
> 
> The user tried again. And kept on getting the error below
> 
> 16.23.48 STC12370  ICH408I USER(E903035 ) GROUP(DDCALLT ) NAME(ANOUF SALEH \
> ALDBASSI)  432 432               PCIC.TDQUEUE CL(CCICSCMD)
> 432               INSUFFICIENT ACCESS AUTHORITY
> 432               ACCESS INTENT(UPDATE )  ACCESS ALLOWED(READ   )
> 
> 
> The error only went away when I defined the profile in CCICSCMD ( 
> resource Class)  and did a RACLIST Refresh
> 
> This Is not how we normally do it - We only define profiles in VCICSCMD
> 
> 
> 
> 
> GROUP CLASS NAME
> ----- ----- ----
> VCICSCMD
> 
> PCIC.*
> 
> 
> [http://media.riyadbank.com/images/emaillogo.png]<https://www.riyadbank
> .com/>
> 
> Prakash Lalaram
> Senior Manager
> BT Specialist
> Tel.:+966-11-204-6600 Ext.: 2235 | Mobile.:+966-56-246-8228 
> prakash.lalaram@riyadbank.com<mailto:prakash.lalaram@riyadbank.com>
> For clean environment, please avoid unnecessary printing.
> 
> 
> 
> This email is classified by Riyad Bank Classification Tool.
> To view Riyad Bank eMail disclaimer, please click here: 
> http://media.riyadbank.com/images/Disclaimer.html

This email is classified by Riyad Bank Classification Tool.
To view Riyad Bank eMail disclaimer, please click here: \
http://media.riyadbank.com/images/Disclaimer.html


[prev in list] [next in list] [prev in thread] [next in thread]