***Similar msg posted in RACF-L***


I have a batch job which uses IEHPROGM to rename a non-SMS non-VSAM data set. 
The userid on the job does not have access to the dataset. I would expect this 
to fail with some format of ICH408I message. But it does not. It fails instead 
with this message,



IGD17061I INSUFFICIENT SECURITY AUTHORIZATION FOR  492

DATA SET ADCD.TEST.DATA

ON VOLUME USER05 HISTORIC RETURN CODE IS 8

DIAGNOSTIC INFORMATION IS 04100800

IEC614I RENAME FAILED - RC 008, DIAGNOSTIC INFORMATION IS (04100800),  493

RENAME,USER05,ADCD.TEST.DATA



I looked up 04100800 in DFP diagnosis and it indicated this was a RACF failure.

When I check using zSecure Access Monitor I see that a RACROUTE REQUEST=AUTH 
for ALTER access was issued.

Given the nature of the messages issued, it seems likely the RACROUTE was 
issued from within SMS, but was issued with SAF message suppression 
(MSGSUPP=YES). Is this new behaviour? Is this a bug?



I have also found that a SCRATCH for the data set does give me an ICH408I as 
expected.



My system is z/OS 3.1 at RSU2409.



Lennie


----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to