Hi Carlos, Rick is correct, you need to have ALTER for the dataset to run the define. If you are trying to define the high level qualifier, you must have RACF access to the master catalogue. Additionally, in most shops these days, RACF is setup not to allow 'unprotected resources' to be defined. A RACF dataset profile must exist first before the definecan run. A quick and easy way to check - without needing to know or run any RACF commands - is to attempt to rename a test dataset to the dataset name you are trying to work with. TSO 3.4 panel is what I use. If you have a RACF issue, the rename will fail and you should give some helpful messages.
Linda Mooney -------------- Original message -------------- From: Rick Fochtman <[email protected]> > ------------------------------------------------------------ > Colleagues, follow up this problem > > Yes, the user for both purpose is the same (so as to execute the DEF > through IDCAMS and run in the command line the DEF command) > > Separate, review the IKJTSOnn members on every Host and LPAR where the > trouble exists (actually on the installation where we work, there are 10 > mainframes between production and development environments; 4 of tall > the mainframes are who have this problem; and the AUTHCMD section > already contains the DEF and DEFINE (Rdef and Rdefine) commands. > > According a documentation of IBM, the last code after execute in the > command line the RDEF means this next: > > RETURN CODE 56 Explanation: A security verification failed. > > Reason Code 36 > > Explanation: The caller is not authorized. When no profile exists for > functions that require RACF authorization, the caller must be at least > APF authorized. > > The question is, "what kind of resource must be missing that protects > this resources into APF definitions or which must be the root of this > trouble? > > Thanks for your help. > ------------------------------------------------------------------------ > - > If I remember correctly, you also need ALTER access to the DSNAMES involved. > > -- > Rick > -- > Remember that if youre not the lead dog, the view never changes. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
