But that would mean checking if the user has access, or if the user has access through any of the groups it is connected to. Gadi
-----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of Lionel B Dyck Sent: Sunday, August 2, 2020 4:54 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Query ESM from REXX While IBM may reformat the probability is low that they will. They have a hard enough time updating TSO Help panels when typos are found. However if they do change the format then it shouldn't be difficult to update the parse. With the RLIST just scan to the bottom and you will see this section: USER ACCESS ACCESS COUNT ---- ------ ------ ----- GROUP1 ALTER 000000 OMVSKERN READ 000000 WEBSRV READ 000000 . . . That should provide you with the info that you are looking for Lionel B. Dyck <sdg>< Website: https://www.lbdsoftware.com "Worry more about your character than your reputation. Character is what you are, reputation merely what others think you are." - John Wooden -----Original Message----- From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of ITschak Mugzach Sent: Sunday, August 2, 2020 7:08 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Query ESM from REXX What change does it make? IBM does ot recommend parsing of command output as it keeps the right to change output format. ITschak Mugzach *|** IronSphere Platform* *|* *Information Security Continuous Monitoring for z/OS, x/Linux & IBM I **| z/VM comming son * On Sun, Aug 2, 2020 at 2:49 PM Lionel B Dyck <lbd...@gmail.com> wrote: > Try issuing the "RLIST FACILITY xxxx.xxx AUTH" command and parse the > results. > > Also take a look at the RACFADM open source RACF admin dialog - CBT > Tape file 417 or https://github.com/lbdyck/racfadm > > > Lionel B. Dyck <sdg>< > Website: https://www.lbdsoftware.com > > "Worry more about your character than your reputation. Character is > what you are, reputation merely what others think you are." - John > Wooden > > -----Original Message----- > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On > Behalf Of Itschak Mugzach > Sent: Sunday, August 2, 2020 6:29 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Query ESM from REXX > > -) > > בתאריך יום א׳, 2 באוג׳ 2020, 14:27, מאת David Spiegel < > dspiegel...@hotmail.com>: > > > Shkoyach > > > > On 2020-08-02 07:25, Itschak Mugzach wrote: > > > You need to use this or wright an assembler program to execute a > > > third party check on the resource in question. Easier in rexx with > irrxutil. > > > > > > בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi > > ><gad...@malam.com > > >: > > > > > >> IRRXUTIL extracts information from the RACF Database for reporting. > > >> It doesn't tell you if a user has access to a resource. > > >> > > >> -----Original Message----- > > >> From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On > > Behalf > > >> Of Itschak Mugzach > > >> Sent: Sunday, August 2, 2020 2:16 PM > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > >> Subject: Re: Query ESM from REXX > > >> > > >> Look at IRRXUTIL > > >> > > >> ITschak > > >> > > >> בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi > > >> <gad...@malam.com > > >: > > >> > > >>> Hi, > > >>> Does anyone know of a way to query an ESM (RACF in this case) > > >>> from a REXX program running under TSO/E and ISPF? > > >>> We are currently at z/OS v2.2. > > >>> > > >>> I would like to know if a user has a certain access level to a > > >>> resource in FACILITY. > > >>> > > >>> Thanks > > >>> > > >>> Gadi > > >>> > > >>> ---------------------------------------------------------------- > > >>> -- > > >>> ---- For IBM-MAIN subscribe / signoff / archive access > > >>> instructions, send email to lists...@listserv.ua.edu with the > > >>> message: INFO IBM-MAIN > > >>> > > >> ----------------------------------------------------------------- > > >> -- > > >> --- For IBM-MAIN subscribe / signoff / archive access > > >> instructions, send > > email > > >> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > >> > > >> Email secured by Check Point > > >> > > >> ----------------------------------------------------------------- > > >> -- > > >> --- For IBM-MAIN subscribe / signoff / archive access > > >> instructions, send email to lists...@listserv.ua.edu with the > > >> message: INFO IBM-MAIN > > >> > > > ------------------------------------------------------------------ > > > -- > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO > > > IBM-MAIN . > > > > -------------------------------------------------------------------- > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO > > IBM-MAIN > > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Email secured by Check Point ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
