Barbara, From the SDSF z/OS 2.3 Operation and Customization Guide :
"As of z/OS V2R3, SDSF requires the SDSF and SDSFAUX address spaces to be active for full functionality. The SDSF address space manages connections, processes ISFPRMxx statements, handles operator commands, and starts and stops SDSFAUX. The SDSFAUX address space is used for data gathering requests. When a user accesses SDSF, the SDSF client program attempts to connect to the SDSF address space. To connect to the SDSF server, the user must have READ access to the ISF.CONNECT.system resource in the SDSF class." SDSF for z/OS 2.3 relies more heavily on SDSF server provided functionality and services, whereas in z/OS 2.1 and 2.2 the SDSF client code was loosely coupled to the SDSFAUX address space for new functionality only (eg the "DEV" or "LNK" commands). By granting READ access to ISF.CONNECT.system, a user or group is a valid user of SDSF server functionality however the user or group can still be restricted from SDSF commands using the normal ISFCMD profiles. If you feel strongly that SDSF should have a customization option to suppress the ICH408I for ISF.CONNECT.system, please raise an RFE as this will help the development team prioritise the request. Rob Scott Rocket Software -----Original Message----- From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf Of Barbara Nitz Sent: Wednesday, July 4, 2018 9:47 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: ISF.CONNECT.* Something has changed with SDSFAUX between z/OS 2.1 and z/OS 2.3. Under z/OS 2.3, each and every user gets a RACF Message when they access their part of SDSF (that's the primary RACF panel). That missing right is for ISF.CONNECT.system, which is described as access to SDSFAUX. None of those users have any need to execute function provided by SDSFAUX, so I see no reason to give them read in that profile. This did not happen under 2.1. These users can work normally with SDSF after the ICH408I. The RACF error is mostly irritating to them and ugly. Why is the check for that right not 'silent' like all the others? Short of granting the right, is there any way to make the RACF message go away? Regards, Barbara ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ================================ Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ Main Office Toll Free Number: +1 855.577.4323 Contact Customer Support: https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - http://www.rocketsoftware.com/manage-your-email-preferences Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy ================================ This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
