Peter Hunkeler wrote: >>For this specific case, wouldn't RACF logging of denied accesses have been a >>way to capture the data as to which job was denied access?
>Good point. I'll have a look. You should have records, provided they were logged in the first place. As others said, FACILITY Class profile IEAABD.DMPAUTH could help you, but as Peter Relson said, be careful about system integrity. You should give only a few lucky guys/gals access to it. (Update or Read as needed) I don't like the book said this: RDEFINE FACILITY IEAABD.DMPAUTH UACC(READ). I will rather lower the UACC. Also, revise IEAABD.DMPAKEY too, for tasks in key less than 8. Remember not to do RACF command SETROPTS REFRESH during an actual dump or while you're trying to terminate those tasks. Good luck and look at LOGREC too for additional diagnostics. Groete / Greetings Elardus Engelbrecht ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
