Re: Query ESM from REXX
Hi CBT file 953 has TRYAUTH a REXX program and CHKAUTH a REXX function written in Assembler. TRYAUTH calls CHKAUTH with a dataset name and CHKAUTH uses RACROUTE to check the access of the ID running the program. For your purposes you would need to change TRYAUTH to pass a facility name and remove the code in CHKAUTH where LOCATE is used to get the VOLSER and the subsequent check for MIGRAT, also change the CLASS in the RACROUTE macro. I hope you find this useful. John -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
Walt, The user need access to query racf with IRRXUTIL as well. I think the best way is a racroute 3rd party check, and a the rexx ned to be compiled to hide the code. ITschak *| **Itschak Mugzach | Director | SecuriTeam Software **|** IronSphere Platform* *|* *Information Security Continuous Monitoring for Z/OS, zLinux and IBM I **| * *|* *Email**: i_mugz...@securiteam.co.il **|* *Mob**: +972 522 986404 **|* *Skype**: ItschakMugzach **|* *Web**: www.Securiteam.co.il **|* On Thu, Aug 6, 2020 at 10:29 PM Walt Farrell wrote: > On Mon, 3 Aug 2020 04:16:38 +, Gadi Ben-Avi wrote: > > >But that would mean checking if the user has access, or if the user has > access through any of the groups it is connected to. > > If I remember correctly, if the user can see anything from the profile > that protects the resource then he has at least READ access somehow. So > that should provide your answer. So running IRRXUTIL and querying the > profile that protects the resource should provide the answer you need. > > However, I'd be careful doing this. First, of course, you have the Time Of > Check To Time Of Use problem, and after you make your check the user may > lose access. > > Next, you need to worry about where the REXX exec runs. If it runs in the > user's address space then there are ways the user might bypass your check. > > Finally, if your REXX exec is going to do something that will also perform > a security check, then it's generally better to just attempt the operation > and let the real enforcement happen. If you try to make a check yourself > you may get false positives or false negatives, depending on TOCTTOU and/or > how the security administrators decided to setup the profile and access > lists. > > -- > Walt > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
On Mon, 3 Aug 2020 04:16:38 +, Gadi Ben-Avi wrote: >But that would mean checking if the user has access, or if the user has access >through any of the groups it is connected to. If I remember correctly, if the user can see anything from the profile that protects the resource then he has at least READ access somehow. So that should provide your answer. So running IRRXUTIL and querying the profile that protects the resource should provide the answer you need. However, I'd be careful doing this. First, of course, you have the Time Of Check To Time Of Use problem, and after you make your check the user may lose access. Next, you need to worry about where the REXX exec runs. If it runs in the user's address space then there are ways the user might bypass your check. Finally, if your REXX exec is going to do something that will also perform a security check, then it's generally better to just attempt the operation and let the real enforcement happen. If you try to make a check yourself you may get false positives or false negatives, depending on TOCTTOU and/or how the security administrators decided to setup the profile and access lists. -- Walt -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
But that would mean checking if the user has access, or if the user has access through any of the groups it is connected to. Gadi -Original Message- From: IBM Mainframe Discussion List On Behalf Of Lionel B Dyck Sent: Sunday, August 2, 2020 4:54 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Query ESM from REXX While IBM may reformat the probability is low that they will. They have a hard enough time updating TSO Help panels when typos are found. However if they do change the format then it shouldn't be difficult to update the parse. With the RLIST just scan to the bottom and you will see this section: USER ACCESS ACCESS COUNT -- -- - GROUP1ALTER 00 OMVSKERN READ00 WEBSRVREAD00 . . . That should provide you with the info that you are looking for Lionel B. Dyck < Website: https://www.lbdsoftware.com "Worry more about your character than your reputation. Character is what you are, reputation merely what others think you are." - John Wooden -Original Message- From: IBM Mainframe Discussion List On Behalf Of ITschak Mugzach Sent: Sunday, August 2, 2020 7:08 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Query ESM from REXX What change does it make? IBM does ot recommend parsing of command output as it keeps the right to change output format. ITschak Mugzach *|** IronSphere Platform* *|* *Information Security Continuous Monitoring for z/OS, x/Linux & IBM I **| z/VM comming son * On Sun, Aug 2, 2020 at 2:49 PM Lionel B Dyck wrote: > Try issuing the "RLIST FACILITY .xxx AUTH" command and parse the > results. > > Also take a look at the RACFADM open source RACF admin dialog - CBT > Tape file 417 or https://github.com/lbdyck/racfadm > > > Lionel B. Dyck < > Website: https://www.lbdsoftware.com > > "Worry more about your character than your reputation. Character is > what you are, reputation merely what others think you are." - John > Wooden > > -Original Message- > From: IBM Mainframe Discussion List On > Behalf Of Itschak Mugzach > Sent: Sunday, August 2, 2020 6:29 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Query ESM from REXX > > -) > > בתאריך יום א׳, 2 באוג׳ 2020, 14:27, מאת David Spiegel < > dspiegel...@hotmail.com>: > > > Shkoyach > > > > On 2020-08-02 07:25, Itschak Mugzach wrote: > > > You need to use this or wright an assembler program to execute a > > > third party check on the resource in question. Easier in rexx with > irrxutil. > > > > > > בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi > > > > >: > > > > > >> IRRXUTIL extracts information from the RACF Database for reporting. > > >> It doesn't tell you if a user has access to a resource. > > >> > > >> -Original Message- > > >> From: IBM Mainframe Discussion List On > > Behalf > > >> Of Itschak Mugzach > > >> Sent: Sunday, August 2, 2020 2:16 PM > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > >> Subject: Re: Query ESM from REXX > > >> > > >> Look at IRRXUTIL > > >> > > >> ITschak > > >> > > >> בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi > > >> > >: > > >> > > >>> Hi, > > >>> Does anyone know of a way to query an ESM (RACF in this case) > > >>> from a REXX program running under TSO/E and ISPF? > > >>> We are currently at z/OS v2.2. > > >>> > > >>> I would like to know if a user has a certain access level to a > > >>> resource in FACILITY. > > >>> > > >>> Thanks > > >>> > > >>> Gadi > > >>> > > >>> > > >>> -- > > >>> For IBM-MAIN subscribe / signoff / archive access > > >>> instructions, send email to lists...@listserv.ua.edu with the > > >>> message: INFO IBM-MAIN > > >>> > > >> - > > >> -- > > >> --- For IBM-MAIN subscribe / signoff / archive access > > >> instructions, send > > email > > >> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > >> > > >> Email secured by Check Point > > >> > > >> - > > >> -- > > >> --- For IBM-MAIN subs
Re: Query ESM from REXX
While IBM may reformat the probability is low that they will. They have a hard enough time updating TSO Help panels when typos are found. However if they do change the format then it shouldn't be difficult to update the parse. With the RLIST just scan to the bottom and you will see this section: USER ACCESS ACCESS COUNT -- -- - GROUP1ALTER 00 OMVSKERN READ00 WEBSRVREAD00 . . . That should provide you with the info that you are looking for Lionel B. Dyck < Website: https://www.lbdsoftware.com "Worry more about your character than your reputation. Character is what you are, reputation merely what others think you are." - John Wooden -Original Message- From: IBM Mainframe Discussion List On Behalf Of ITschak Mugzach Sent: Sunday, August 2, 2020 7:08 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Query ESM from REXX What change does it make? IBM does ot recommend parsing of command output as it keeps the right to change output format. ITschak Mugzach *|** IronSphere Platform* *|* *Information Security Continuous Monitoring for z/OS, x/Linux & IBM I **| z/VM comming son * On Sun, Aug 2, 2020 at 2:49 PM Lionel B Dyck wrote: > Try issuing the "RLIST FACILITY .xxx AUTH" command and parse the > results. > > Also take a look at the RACFADM open source RACF admin dialog - CBT > Tape file 417 or https://github.com/lbdyck/racfadm > > > Lionel B. Dyck < > Website: https://www.lbdsoftware.com > > "Worry more about your character than your reputation. Character is > what you are, reputation merely what others think you are." - John > Wooden > > -Original Message- > From: IBM Mainframe Discussion List On > Behalf Of Itschak Mugzach > Sent: Sunday, August 2, 2020 6:29 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Query ESM from REXX > > -) > > בתאריך יום א׳, 2 באוג׳ 2020, 14:27, מאת David Spiegel < > dspiegel...@hotmail.com>: > > > Shkoyach > > > > On 2020-08-02 07:25, Itschak Mugzach wrote: > > > You need to use this or wright an assembler program to execute a > > > third party check on the resource in question. Easier in rexx with > irrxutil. > > > > > > בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi > > > > >: > > > > > >> IRRXUTIL extracts information from the RACF Database for reporting. > > >> It doesn't tell you if a user has access to a resource. > > >> > > >> -Original Message- > > >> From: IBM Mainframe Discussion List On > > Behalf > > >> Of Itschak Mugzach > > >> Sent: Sunday, August 2, 2020 2:16 PM > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > >> Subject: Re: Query ESM from REXX > > >> > > >> Look at IRRXUTIL > > >> > > >> ITschak > > >> > > >> בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi > > >> > >: > > >> > > >>> Hi, > > >>> Does anyone know of a way to query an ESM (RACF in this case) > > >>> from a REXX program running under TSO/E and ISPF? > > >>> We are currently at z/OS v2.2. > > >>> > > >>> I would like to know if a user has a certain access level to a > > >>> resource in FACILITY. > > >>> > > >>> Thanks > > >>> > > >>> Gadi > > >>> > > >>> > > >>> -- > > >>> For IBM-MAIN subscribe / signoff / archive access > > >>> instructions, send email to lists...@listserv.ua.edu with the > > >>> message: INFO IBM-MAIN > > >>> > > >> - > > >> -- > > >> --- For IBM-MAIN subscribe / signoff / archive access > > >> instructions, send > > email > > >> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > >> > > >> Email secured by Check Point > > >> > > >> - > > >> -- > > >> --- For IBM-MAIN subscribe / signoff / archive access > > >> instructions, send email to lists...@listserv.ua.edu with the > > >> message: INFO IBM-MAIN > > >> > > > -- > > > -- > > > -- For IBM-MAIN subscribe / signoff / archive ac
Re: Query ESM from REXX
What change does it make? IBM does ot recommend parsing of command output as it keeps the right to change output format. ITschak Mugzach *|** IronSphere Platform* *|* *Information Security Continuous Monitoring for z/OS, x/Linux & IBM I **| z/VM comming son * On Sun, Aug 2, 2020 at 2:49 PM Lionel B Dyck wrote: > Try issuing the "RLIST FACILITY .xxx AUTH" command and parse the > results. > > Also take a look at the RACFADM open source RACF admin dialog - CBT Tape > file 417 or https://github.com/lbdyck/racfadm > > > Lionel B. Dyck < > Website: https://www.lbdsoftware.com > > "Worry more about your character than your reputation. Character is what > you are, reputation merely what others think you are." - John Wooden > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Itschak Mugzach > Sent: Sunday, August 2, 2020 6:29 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Query ESM from REXX > > -) > > בתאריך יום א׳, 2 באוג׳ 2020, 14:27, מאת David Spiegel < > dspiegel...@hotmail.com>: > > > Shkoyach > > > > On 2020-08-02 07:25, Itschak Mugzach wrote: > > > You need to use this or wright an assembler program to execute a > > > third party check on the resource in question. Easier in rexx with > irrxutil. > > > > > > בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi > > > > >: > > > > > >> IRRXUTIL extracts information from the RACF Database for reporting. > > >> It doesn't tell you if a user has access to a resource. > > >> > > >> -Original Message- > > >> From: IBM Mainframe Discussion List On > > Behalf > > >> Of Itschak Mugzach > > >> Sent: Sunday, August 2, 2020 2:16 PM > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > >> Subject: Re: Query ESM from REXX > > >> > > >> Look at IRRXUTIL > > >> > > >> ITschak > > >> > > >> בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi > > >> > >: > > >> > > >>> Hi, > > >>> Does anyone know of a way to query an ESM (RACF in this case) from > > >>> a REXX program running under TSO/E and ISPF? > > >>> We are currently at z/OS v2.2. > > >>> > > >>> I would like to know if a user has a certain access level to a > > >>> resource in FACILITY. > > >>> > > >>> Thanks > > >>> > > >>> Gadi > > >>> > > >>> -- > > >>> For IBM-MAIN subscribe / signoff / archive access > > >>> instructions, send email to lists...@listserv.ua.edu with the > > >>> message: INFO IBM-MAIN > > >>> > > >> --- > > >> --- For IBM-MAIN subscribe / signoff / archive access instructions, > > >> send > > email > > >> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > >> > > >> Email secured by Check Point > > >> > > >> --- > > >> --- For IBM-MAIN subscribe / signoff / archive access instructions, > > >> send email to lists...@listserv.ua.edu with the message: INFO > > >> IBM-MAIN > > >> > > > > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO > > > IBM-MAIN . > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
What's the difference? Ibm does not recommend command output parsing as it is prone to changes. ITschak בתאריך יום א׳, 2 באוג׳ 2020, 14:49, מאת Lionel B Dyck : > Try issuing the "RLIST FACILITY .xxx AUTH" command and parse the > results. > > Also take a look at the RACFADM open source RACF admin dialog - CBT Tape > file 417 or https://github.com/lbdyck/racfadm > > > Lionel B. Dyck < > Website: https://www.lbdsoftware.com > > "Worry more about your character than your reputation. Character is what > you are, reputation merely what others think you are." - John Wooden > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Itschak Mugzach > Sent: Sunday, August 2, 2020 6:29 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Query ESM from REXX > > -) > > בתאריך יום א׳, 2 באוג׳ 2020, 14:27, מאת David Spiegel < > dspiegel...@hotmail.com>: > > > Shkoyach > > > > On 2020-08-02 07:25, Itschak Mugzach wrote: > > > You need to use this or wright an assembler program to execute a > > > third party check on the resource in question. Easier in rexx with > irrxutil. > > > > > > בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi > > > > >: > > > > > >> IRRXUTIL extracts information from the RACF Database for reporting. > > >> It doesn't tell you if a user has access to a resource. > > >> > > >> -Original Message- > > >> From: IBM Mainframe Discussion List On > > Behalf > > >> Of Itschak Mugzach > > >> Sent: Sunday, August 2, 2020 2:16 PM > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > >> Subject: Re: Query ESM from REXX > > >> > > >> Look at IRRXUTIL > > >> > > >> ITschak > > >> > > >> בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi > > >> > >: > > >> > > >>> Hi, > > >>> Does anyone know of a way to query an ESM (RACF in this case) from > > >>> a REXX program running under TSO/E and ISPF? > > >>> We are currently at z/OS v2.2. > > >>> > > >>> I would like to know if a user has a certain access level to a > > >>> resource in FACILITY. > > >>> > > >>> Thanks > > >>> > > >>> Gadi > > >>> > > >>> -- > > >>> For IBM-MAIN subscribe / signoff / archive access > > >>> instructions, send email to lists...@listserv.ua.edu with the > > >>> message: INFO IBM-MAIN > > >>> > > >> --- > > >> --- For IBM-MAIN subscribe / signoff / archive access instructions, > > >> send > > email > > >> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > >> > > >> Email secured by Check Point > > >> > > >> --- > > >> --- For IBM-MAIN subscribe / signoff / archive access instructions, > > >> send email to lists...@listserv.ua.edu with the message: INFO > > >> IBM-MAIN > > >> > > > > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to lists...@listserv.ua.edu with the message: INFO > > > IBM-MAIN . > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
Try issuing the "RLIST FACILITY .xxx AUTH" command and parse the results. Also take a look at the RACFADM open source RACF admin dialog - CBT Tape file 417 or https://github.com/lbdyck/racfadm Lionel B. Dyck < Website: https://www.lbdsoftware.com "Worry more about your character than your reputation. Character is what you are, reputation merely what others think you are." - John Wooden -Original Message- From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach Sent: Sunday, August 2, 2020 6:29 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Query ESM from REXX -) בתאריך יום א׳, 2 באוג׳ 2020, 14:27, מאת David Spiegel < dspiegel...@hotmail.com>: > Shkoyach > > On 2020-08-02 07:25, Itschak Mugzach wrote: > > You need to use this or wright an assembler program to execute a > > third party check on the resource in question. Easier in rexx with irrxutil. > > > > בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi > > >: > > > >> IRRXUTIL extracts information from the RACF Database for reporting. > >> It doesn't tell you if a user has access to a resource. > >> > >> -Original Message- > >> From: IBM Mainframe Discussion List On > Behalf > >> Of Itschak Mugzach > >> Sent: Sunday, August 2, 2020 2:16 PM > >> To: IBM-MAIN@LISTSERV.UA.EDU > >> Subject: Re: Query ESM from REXX > >> > >> Look at IRRXUTIL > >> > >> ITschak > >> > >> בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi > >> >: > >> > >>> Hi, > >>> Does anyone know of a way to query an ESM (RACF in this case) from > >>> a REXX program running under TSO/E and ISPF? > >>> We are currently at z/OS v2.2. > >>> > >>> I would like to know if a user has a certain access level to a > >>> resource in FACILITY. > >>> > >>> Thanks > >>> > >>> Gadi > >>> > >>> -- > >>> For IBM-MAIN subscribe / signoff / archive access > >>> instructions, send email to lists...@listserv.ua.edu with the > >>> message: INFO IBM-MAIN > >>> > >> --- > >> --- For IBM-MAIN subscribe / signoff / archive access instructions, > >> send > email > >> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > >> > >> Email secured by Check Point > >> > >> --- > >> --- For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to lists...@listserv.ua.edu with the message: INFO > >> IBM-MAIN > >> > > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO > > IBM-MAIN . > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
-) בתאריך יום א׳, 2 באוג׳ 2020, 14:27, מאת David Spiegel < dspiegel...@hotmail.com>: > Shkoyach > > On 2020-08-02 07:25, Itschak Mugzach wrote: > > You need to use this or wright an assembler program to execute a third > > party check on the resource in question. Easier in rexx with irrxutil. > > > > בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi >: > > > >> IRRXUTIL extracts information from the RACF Database for reporting. > >> It doesn't tell you if a user has access to a resource. > >> > >> -Original Message- > >> From: IBM Mainframe Discussion List On > Behalf > >> Of Itschak Mugzach > >> Sent: Sunday, August 2, 2020 2:16 PM > >> To: IBM-MAIN@LISTSERV.UA.EDU > >> Subject: Re: Query ESM from REXX > >> > >> Look at IRRXUTIL > >> > >> ITschak > >> > >> בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi >: > >> > >>> Hi, > >>> Does anyone know of a way to query an ESM (RACF in this case) from a > >>> REXX program running under TSO/E and ISPF? > >>> We are currently at z/OS v2.2. > >>> > >>> I would like to know if a user has a certain access level to a > >>> resource in FACILITY. > >>> > >>> Thanks > >>> > >>> Gadi > >>> > >>> -- > >>> For IBM-MAIN subscribe / signoff / archive access instructions, send > >>> email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > >>> > >> -- > >> For IBM-MAIN subscribe / signoff / archive access instructions, send > email > >> to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > >> > >> Email secured by Check Point > >> > >> -- > >> For IBM-MAIN subscribe / signoff / archive access instructions, > >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > >> > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > . > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
Shkoyach On 2020-08-02 07:25, Itschak Mugzach wrote: You need to use this or wright an assembler program to execute a third party check on the resource in question. Easier in rexx with irrxutil. בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi : IRRXUTIL extracts information from the RACF Database for reporting. It doesn't tell you if a user has access to a resource. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach Sent: Sunday, August 2, 2020 2:16 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Query ESM from REXX Look at IRRXUTIL ITschak בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi : Hi, Does anyone know of a way to query an ESM (RACF in this case) from a REXX program running under TSO/E and ISPF? We are currently at z/OS v2.2. I would like to know if a user has a certain access level to a resource in FACILITY. Thanks Gadi -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Email secured by Check Point -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN . -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
You need to use this or wright an assembler program to execute a third party check on the resource in question. Easier in rexx with irrxutil. בתאריך יום א׳, 2 באוג׳ 2020, 14:20, מאת Gadi Ben-Avi : > IRRXUTIL extracts information from the RACF Database for reporting. > It doesn't tell you if a user has access to a resource. > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Itschak Mugzach > Sent: Sunday, August 2, 2020 2:16 PM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Query ESM from REXX > > Look at IRRXUTIL > > ITschak > > בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi : > > > Hi, > > Does anyone know of a way to query an ESM (RACF in this case) from a > > REXX program running under TSO/E and ISPF? > > We are currently at z/OS v2.2. > > > > I would like to know if a user has a certain access level to a > > resource in FACILITY. > > > > Thanks > > > > Gadi > > > > -- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > Email secured by Check Point > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
IRRXUTIL extracts information from the RACF Database for reporting. It doesn't tell you if a user has access to a resource. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Itschak Mugzach Sent: Sunday, August 2, 2020 2:16 PM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Query ESM from REXX Look at IRRXUTIL ITschak בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi : > Hi, > Does anyone know of a way to query an ESM (RACF in this case) from a > REXX program running under TSO/E and ISPF? > We are currently at z/OS v2.2. > > I would like to know if a user has a certain access level to a > resource in FACILITY. > > Thanks > > Gadi > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN Email secured by Check Point -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Query ESM from REXX
Look at IRRXUTIL ITschak בתאריך יום א׳, 2 באוג׳ 2020, 14:06, מאת Gadi Ben-Avi : > Hi, > Does anyone know of a way to query an ESM (RACF in this case) from a REXX > program running under TSO/E and ISPF? > We are currently at z/OS v2.2. > > I would like to know if a user has a certain access level to a resource in > FACILITY. > > Thanks > > Gadi > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Query ESM from REXX
Hi, Does anyone know of a way to query an ESM (RACF in this case) from a REXX program running under TSO/E and ISPF? We are currently at z/OS v2.2. I would like to know if a user has a certain access level to a resource in FACILITY. Thanks Gadi -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
