I would also check if the user(s) have OWNER=xxxxxx. PREFIX=xxxxxx, and/or SYSTEM=xxxxx set. This can be entered from the SDSF command line.
Matthew On Fri, 13 Mar 2020 11:45:52 +0000, Bill Johnson <[email protected]> wrote: >Thanks Bob. > > >Sent from Yahoo Mail for iPhone > > >On Friday, March 13, 2020, 7:09 AM, Robert S. Hansel (RSH) ><[email protected]> wrote: > >Hi Bill, > >In general, users automatically get full ALTER access to their own output, so >I doubt JESSPOOL is the issue. If they are attempting to delete output from >within SDSF, they also need access to SDSF panels and operator commands. These >are controlled by RACF profiles in the SDSF, GSDSF, and OPERCMDS classes, or >if they are not protected by RACF, then by SDSF's ISFPARMS. > >You can use SDSF's SECTRACE to help debug the problem. Have a user execute SET >SECTRACE ON or WTP at the SDSF command line (ON sends the results to ULOG; WTP >to SYSLOG). Have the user attempt to delete output. Then, assuming they >specified ON, have the user execute the ULOG command to see the RACF calls and >their results. This assumes the user has authority to use ULOG - SDSF class >resource ISFCMD.ODSP.ULOG.jesname or the ISFPARMS equivalent. > >Regards, Bob > >Robert S. Hansel >Lead RACF Specialist >RSH Consulting, Inc. >617-969-8211 >www.linkedin.com/in/roberthansel >www.twitter.com/RSH_RACF >www.rshconsulting.com >--------------------------------------------------------------------------- >Upcoming RSH RACF Training - WebEx >- RACF Audit & Compliance Roadmap - OCT 19-23, 2020 >- RACF Level I Administration - APR 27 - MAY 1, 2020 >- RACF Level II Administration - APR 6-10, 2020 >- RACF Level III Admin, Audit, & Compliance - NOV 2-6, 2020 >- RACF - Securing z/OS UNIX - SEPT 28 - OCT 2, 2020 >--------------------------------------------------------------------------- > >-----Original Message----- >Date: Thu, 12 Mar 2020 20:09:24 +0000 >From: Bill Johnson <[email protected]> >Subject: JESSPOOL > >I’m not a RACF expert and need help giving a user the ability to delete their >own SDSF output. Not really sure why they don’t have it. Not my setup. Is it >an easy 1 command fix or more complex? >Thanks > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
