thank you it’s my ADCD system I have access to the console thanks for helping me



Get Outlook for iOS<https://aka.ms/o0ukef>
________________________________
From: IBM Mainframe Discussion List <[email protected]> on behalf of 
Radoslaw Skorupka <[email protected]>
Sent: Friday, July 4, 2025 12:33:20 PM
To: [email protected] <[email protected]>
Subject: Re: RACF access to cancel a job Permit command

For that case it's simple, but it is not general solution:

PE *.** CLASS(JESS) ID(JOER) ACC(A)
SETR RACLIST(JESS) REF

Remarks:
1. Depending on your JESSPOOL policy it is likely "all the power" for
SPOOL datasets. Maybe it's good for you and for non-prod system, but
generally it's too much. If you really care about the outputs, then
think about less generic profiles.
2. There are many ways to skin a cat or cancel a job. You can use MVS
CANCEL or JES2 $C commands.
3. Actually JESSPOOL profile is additional check from SDSF, so "pure"
command on console or SDSF log /command will not check that class profile.
4. While SDSF provides better flexibility and granularity than pure MVS
console, it also provide some complexity (more dependencies), which may
be misleading a little bit.



--
Radoslaw Skorupka
Lodz, Poland



W dniu 04.07.2025 o 18:18, Joseph Reichman pisze:
> Hi
>
> Would anyone know the racf command I guess it would be PERMIT command to
> allow the specified user to cancel the following job
>
> I was on SDSF DA panel typing in "C" to cancel the job
>
> When I got the error below
>
>
> SDSF DA S0W1     S0W1     PAG  0  CPU/L    10/***      NOT AUTHORIZED TO JOB
>
>   COMMAND INPUT ===>                                            SCROLL ===>
> PAGE
>   NP   JOBNAME  StepName ProcStep JobID    Owner    C Pos DP Real Paging
> SIO
>   C    DBGRSERV DBGRSERV DBGRSERV STC01219 START1     IN  C0  326   0.00
> 0.00
>
> ICH408I USER(JOER    ) GROUP(SYS1    ) NAME(JOSEPH REICHMAN     )
>
>    S0W1.START1.DBGRSERV.STC01219 CL(JESSPOOL)
>
>    INSUFFICIENT ACCESS AUTHORITY
>
>    FROM *.** (G)
>
>    ACCESS INTENT(ALTER  )  ACCESS ALLOWED(READ   )
>
> ***
>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to