On Thu, 27 Jul 2006 15:49:37 +0200, R.S. <[EMAIL PROTECTED]> wrote: >Paolo Pirillo wrote: > >> On Thu, 27 Jul 2006 14:06:33 +0200, R.S. <[EMAIL PROTECTED]> wrote: >> >> >>>Paolo Pirillo wrote: >>> >>> >>>>On Thu, 27 Jul 2006 13:15:09 +0200, R.S. <[EMAIL PROTECTED]> >> >> wrote: >> >>>>No Problem: >>>> >>>>STC05980 00000090 ICH408I JOB(OSASF ) STEP(OSASF ) IOA.CONNECT.FILE >>>>CL(FACILITY) 544 >>>> 544 00000090 INSUFFICIENT ACCESS AUTHORITY >>>> >>>> 544 00000090 FROM IOA.** (G) >>>> >>>> 544 00000090 ACCESS INTENT(CONTROL) ACCESS ALLOWED(NONE ) >>>> >>>> >>>>In RACF is def: >>>> >>>>CLASS NAME >>>>----- ---- >>>>FACILITY IOA.** (G) >>>> >>>>LEVEL OWNER UNIVERSAL ACCESS YOUR ACCESS WARNING >>>>----- -------- ---------------- ----------- ------- >>>> 00 RACFADV NONE CONTROL NO >>>> >>>>The problem is that no UID ist passed! >>> >>>This is correct. No user (see note *) is passed, because no user is >>>assigned. ICH408I displays user/group OR job/step when no user is assigned. >>>Obviously YOU have userid assigned, but the started task, OSASF have >>>not. That's the problem. >>>You need to define OSASF in STARTED class, i.e. >>>RDEF STARTED OSASF.* STDATA(USER(some_user)) >>>some_user need to be authorized to IOA.** at CONTROL level: >>>PE IOA.** CLASS(FACILITY) ID(some_user) ACC(C) >>> >>> >>>*Note: don't use UID when talking about user. UID usually means User ID, >>> part of OMVS segment. This is confusing. >>> >>>-- >>>Radoslaw Skorupka >>>Lodz, Poland >> >> >> Excuse me when I was misleading in my expression >> >> That is not the reason. We have defined a USER to OSASF! >> >> IEF695I START OSASF WITH JOBNAME OSASF IS ASSIGNED TO USER STC045 >> >> And the USER had access to the FACILITY Profile: >> >> USER ACCESS >> ---- ------ >> STC045 CONTROL > >Can you check owner of task STC05980 ? >Is it ++++++++ or STC045 ? > >IMHO information from message IEF695I is contrary to the ICH408I. > >-- >Radoslaw Skorupka >Lodz, Poland
It is the same (i checked these things already): OSASF OSASF OSASF1 STC05980 STC045 I am very familiar with RACF but I can not see why the USER is lost when using IOACMD under TSO! ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
