Yes. It runs in Key zero, apf authorized. I googled for the +console issue,
and I think MGCRE with consoleid will solve the problem, but I want to
avoid this change.

ITschak

ITschak Mugzach
Z/OS, ISV Products and Application Security & Risk Assessments Professional

On Thu, Mar 5, 2015 at 5:41 PM, Lizette Koehler <stars...@mindspring.com>
wrote:

> You might try running the sectrace to see what is occurring.
> Is the exit apf authorized?  Is the exit rent or not?  Is the exit in an
> apf authorized library or lpa?
>
> Lizette
>
>
> -----Original Message-----
> >From: Itschak Mugzach <imugz...@gmail.com>
> >Sent: Mar 5, 2015 7:29 AM
> >To: IBM-MAIN@LISTSERV.UA.EDU
> >Subject: MGCR in a non typical asid
> >
> >I am running a MPF exit that works fine from user adress spaces. In
> respond
> >to RACF msg ICH302D, the userid assigned is +CONSOLE. The OPERCMDS profile
> >is having uacc read, but racf refuses the REPLYxx,Y
> >Another command issued under the same conditions (no acce)is MVS SEND
> >command, this time from mstjcl00.I am trying to avoid converting to MGCRE.
> >
> >Any Idea how to assign an active id to the exit, or CONSOLEID?
> >
> >
> >ICH408I USER(+CONSOLE) GROUP(*       ) NAME(???                 ) 931
> >
> >  MVS.REPLY CL(OPERCMDS)
> >
> >  INSUFFICIENT ACCESS AUTHORITY
> >
> >  ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )
> >
> >IEE345I REPLY    AUTHORITY INVALID, FAILED BY SECURITY PRODUCT
> >
> >ITschak Mugzach
> >
> >----------------------------------------------------------------------
> >For IBM-MAIN subscribe / signoff / archive access instructions,
> >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to