If the new PAGE.** profile access list includes you, then your OPERATIONS 
attribute will not apply. Perhaps this is your issue.  

That is, before you had no explicit access, so the OPERATIONS attribute gave 
you an implicit ALTER access. Afterwards, you had explicit access and that 
negated your OPERATONS access. 

I don't think it applies to you, but an insufficient access to any of the 
affected catalogs could cause you some grief.     

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of 
Scott Rowe
Sent: Tuesday, August 18, 2009 2:12 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: IDC3009I RC=110

I understand all that, yet the fact remains that this process worked before, 
when there was no PAGE.** profile defined.  I guess this is not a big deal now, 
I was just trying to understand what had changed.

>>> John Laubenheimer <jlaubenhei...@doitt.nyc.gov> 8/18/2009 2:46 PM >>>
Also, check the SETROPTS for the PROTECTALL option.  If you had a PAGE.* 
profile, which only covered the 2nd level, the PAGE.A.another_level is NOT 
protected, and RACF (actually DFSMS) would fail any access to the dataset.  
When you created PAGE.**, you then covered any number of levels after 
PAGE., and RACF/DFSMS would then allow access.

And, as previously stated (I think), when you rename a RACF protected 
dataset, the dataset name that it is renamed to must also be protected.  
(Level of protection doesn't really matter ... just covered by a profile.)

 
NOTICE: This electronic mail message and any files transmitted with it are 
intended
exclusively for the individual or entity to which it is addressed. The message, 
together with any attachment, may contain confidential and/or privileged 
information.
Any unauthorized review, use, printing, saving, copying, disclosure or 
distribution 
is strictly prohibited. If you have received this message in error, please 
immediately advise the sender by reply email and delete all copies.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to