Skip

One thought that occurs about this situation that would make SDSF behave 
against its normal processing logic is when the installation has an ISFUSER 
exit installed.

The ISFUSER exit could be changing the "command authorization" bits in the user 
parm area for a user that does not have SAF authority to the ISFCMD.ODSP.* 
profile.

Regards

Rob

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Jesse 1 Robinson
Sent: Thursday, July 5, 2018 11:30 PM
To: [email protected]
Subject: Re: Function in SDSF to list Dynamic Exits

We IPLed a new system today with 2.3. My SDSF menu is in 'hide mode'. All of 
the following options are displayed, but none of them works.

PROC     Proclib data sets        JES
SSI      Subsystem information    System
CFC      CF Connections           Sysplex
CFS      CF Structures            Sysplex
VMAP     Virtual storage map      Memory
SMSG     SMS storage groups       Devices
SMSV     SMS volumes              Devices
FS       File systems             OMVS
CSR      Common storage remaining Memory
GT       Generic tracker          System
NA       Network activity         Network
DEV      Device activity          Devices

"ISF452E SDSFAUX communications failed, return code 0x00000008, reason code |
"0x00360806, function "query xxxx". Not authorized for request"              |

.
.
J.O.Skip Robinson
Southern California Edison Company
Electric Dragon Team Paddler
SHARE MVS Program Co-Manager
323-715-0595 Mobile
626-543-6132 Office ⇐=== NEW
[email protected]


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Elardus Engelbrecht
Sent: Thursday, July 05, 2018 5:26 AM
To: [email protected]
Subject: (External):Re: Function in SDSF to list Dynamic Exits

Rob Scott wrote:

>By default, commands that you do not have access to via ISFCMD or group 
>authority will not appear on the SDSF main menu.

Indeed! Please see (watch the wrrrrrrap!) this URL:

https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ibm.com%2Fsupport%2Fknowledgecenter%2Fen%2FSSLTBW_2.3.0%2Fcom.ibm.zos.v2r3.isfa500%2Frescmds.htm&data=02%7C01%7CRScott%40ROCKETSOFTWARE.COM%7C7bb1378c6e0a4d4b145908d5e2c6ed39%7C79544c1eed224879a082b67a9a672aae%7C0%7C0%7C636664266386648391&sdata=5tc3rolN4Jk0YPBCObJut01H0kKDD9Gv7NV%2BkdrHJpc%3D&reserved=0

... for a list of profiles starting with ISFCMD in SDSF RACF Class.


Abilities to use or see unauthorised screens/commands are also managed by:
  ISFPARM (If you use SERVER.NOPARM in SDSF class)
  ISFPRMxx
  RACF Classes - TSOAUTH/FACILITY/SDSF/LOGSTRM/OPERCMDS/XFACILIT.

See this site for a loooooooooooong list of resources to protect everthing in 
SDSF:

https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww.ibm.com%2Fsupport%2Fknowledgecenter%2Fen%2FSSLTBW_2.3.0%2Fcom.ibm.zos.v2r3.isfa500%2Faperes.htm&data=02%7C01%7CRScott%40ROCKETSOFTWARE.COM%7C7bb1378c6e0a4d4b145908d5e2c6ed39%7C79544c1eed224879a082b67a9a672aae%7C0%7C0%7C636664266386648391&sdata=PIAyZ1x%2BqnJ2rWyjhgvS5aO%2FRXw6RVHuWcScQOgM9vY%3D&reserved=0


>You can issue the "SET MENU ALL" to show all commands and unauthorised 
>commands will have the "Status" of "Command not authorized".

Or go to pull-down menu. Select 'Display', then select '1. Panels' to see all 
and every panels in SDSF world.

Groete / Greetings
Elardus Engelbrecht


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
================================
Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ 
Main Office Toll Free Number: +1 855.577.4323
Contact Customer Support: 
https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
http://www.rocketsoftware.com/manage-your-email-preferences
Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy
================================

This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to