I believe that there may be something wrong with the FACILITY resource. I'm almost positive that it checks for the FACILITY before checking the "catalog" because FACILITY (RACLISTed) is potentially quicker.
It is defined and active? The user or his group is in the access list? You haven't just added this FACILITY or PErmitted this user (i.e. REFRESH RACLIST(FACILITY) needed)? It may be necessary to use GTF to trace the RACF invocations to see what it is doing. Alan -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Hal Merritt Sent: Tuesday, August 31, 2010 11:46 To: [email protected] Subject: RMM Volume Delete fails. I have an operator trying to delete a volume: //IDCAMS1 EXEC PGM=IDCAMS //SYSPRINT DD SYSOUT=* //SYSIN DD * DELETE (Vxxxxxx) VOLUMEENTRY PURGE He is failing: ICH408I USER(opuser) GROUP(usergrp) NAME(operator) 233 SYS1.VOLCAT.VGENERAL CL(DATASET ) VOL(volser) INSUFFICIENT ACCESS AUTHORITY FROM SYS1.VOLCAT.VGENERAL (G) ACCESS INTENT(ALTER ) ACCESS ALLOWED(UPDATE ) The FM: http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/dgt2i280/A.1?SHELF=EZ2ZBK0H.bks&DT=20090603090124#TBLVOLCA states that ALTER to FACILITY STGADMIN.IGG.LIBRARY should do the trick. However, as you can see, it don't. The RACF folks don't see anything wrong with the profiles. Any ideas? Thanks!! NOTICE: This electronic mail message and any files transmitted with it are intended exclusively for the individual or entity to which it is addressed. The message, together with any attachment, may contain confidential and/or privileged information. Any unauthorized review, use, printing, saving, copying, disclosure or distribution is strictly prohibited. If you have received this message in error, please immediately advise the sender by reply email and delete all copies. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
