>I want to add a new generic profile to the facility class to use if for >protecting some functions within an application. I execute an RDEFINE as >>follows: > >rdef facility abc.addrspac.** uacc(none). > >RACF does not gripe about this. Says everythingis fine,as far as I can >tell. > >next I execute > >setropts generic(facility) refresh > >I then execute a PERMIT as follows: > >permit abc.addrspac.dad* access(read) class(facility) id(dad) > >And get the following: > >ICH06004I ABC.ADDRSPAC.DAD* NOT DEFINED TO RACF > > >What am I doing wrong?'
You'd need to do an RDEF for ABC.ADDRSPAC.DAD* as well. This is going to be a separate and more specific profile than the ABC.ADDRSPAC.**. As it stands, you can only do a PERMIT to ABC.ADDRSPAC.**. --Brad Snyder ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
