Prior to SDSF v2r5, SDSF activated an EMCS console only when the user had read access to ISFCMD.ODSP.ULOG.* in the SDSF class.
If the user did not have access, SDSF would issue the command using the internal console. The user would also not have access to the ULOG panel. As of SDSF v2r5, access to ULOG is no longer checked as we have decoupled ULOG from just operator command authority because we are putting other interesting information into the user log. The user does not need access to ISFCMD.ODSP.ULOG.* and all users can access the ULOG panel. An EMCS console is activated on the first command issued by SDSF regardless of whether the user has access to ISFCMD.ODSP.ULOG.*. SDSF is activating an EMCS console in order to issue the operator command from the EMCS and gather any response. When a console is activated, the CONSOLE component (not SDSF) checks access to MVS.MCSOPER.consolename. For compatibility, you can revert to the prior behavior by adding a custom property to ISFPRMxx. If you set property Console.EMCS.UlogAuthReq to TRUE, SDSF will only activate an EMCS console when the user has access to ISFCMD.ODSP.ULOG.*. See ISF.SISFJCL(ISFPRM01) for an example of setting this property. Note that all users will still have access to the ULOG panel even when this property is set. Rob Scott Rocket Software -----Original Message----- From: IBM Mainframe Discussion List <[email protected]> On Behalf Of Luc Martens (KBC) Sent: Tuesday, October 29, 2024 5:18 AM To: [email protected] Subject: Re: SDSF/RACF weird behaviour EXTERNAL EMAIL The reason why you see this error is that SDSF will try to open an ULOG for the user to capture the result of the SDSF cancel command. In order to do this, he needs access to an EMCS console. By default the EMCS console name is the userid, hence you see access/violation to MVS.MCSOPER.userid profile in OPERCMDS. I agree with Lodz, define RALT GLOBAL OPERCMDS MVS.MCSOPER.&RACUID*/READ. Make sure you activate OPERCMDS in the GLOBAL class. br, Luc ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ================================ Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ Main Office Toll Free Number: +1 855.577.4323 Contact Customer Support: https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - http://www.rocketsoftware.com/manage-your-email-preferences Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy ================================ This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
