As Mark mentioned, apparently RACF already has profiles in OPERCMDS to limit the command. However, you are not seeing the ICH408I messages because of the options JES2 uses on the RACROUTE REQUEST=AUTH request. I believe that you can get the ICH408I (if you need them) temporarily by using a JES2 $TDEBUG command. Also, I believe that even if the messages are suppressed, there will still be violation records written to SMF, so you run the RACF SMF extract jobs and see the violations there.
Wayne Driscoll Product Developer NOTE: All opinions are strictly my own. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Mark Zelden Sent: Wednesday, April 02, 2008 1:17 PM To: IBM-MAIN@BAMA.UA.EDU Subject: Re: Fw: AS400 On Wed, 2 Apr 2008 12:18:46 -0500, Ron Wells <[EMAIL PROTECTED]> wrote: >ok---seems with my id and psw it works... >still shaky that any command can be issued once authority given....any >means to lock that down..? > RACF. Apparently it is locked down already. Mark -- Mark Zelden Sr. Software and Systems Architect - z/OS Team Lead Zurich North America / Farmers Insurance Group - ZFUS G-ITO mailto:[EMAIL PROTECTED] z/OS Systems Programming expert at http://expertanswercenter.techtarget.com/ Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
