You know what I am thinking of doing? Yes, it would be great to loop through all of the concatenations of STEPLIB and display the APF status of each. More time than I can justify at this moment. But what about the following? Wouldn't this solve the problem? A very simple program that would open a vanilla input DCB for SYSUT1, chain to the DEB and check the APF bit (DEBAPFIN?), and then issue a yay/nay WTO? A customer would have to copy the STEPLIB concatenations DD's one at a time into the SYSUT1 DD in a simple little jobstep, but that should be do-able. Advantage over a display command and IEHIBALL? If they copied it exactly as it was specified in STEPLIB then it would avoid all eyeball checks on the exact dataset name, multiple instances of a name on different VOLSERs, etc.
The source should be small enough to paste here, and I would do so if there is interest. Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Ed Jaffe Sent: Tuesday, November 22, 2016 6:23 PM To: [email protected] Subject: Re: Which STEPLIB concatenation is not authorized? On 11/22/2016 5:06 AM, Peter Relson wrote: > > What the system has, and could return (indeed does provide to the > CSVFETCH exit as of z/OS 2.2) is the UCB address and CCHH of the data > set. I don't claim to know exactly how, but you can get from that to the data > set name. > An enhancement could be made to CSVQUERY/CSVINFO to provide that data. I assume one would use the UCB address to get the volser, then process the VTOC using CVAFSEQ or similar to find which data set is located at that CCHH. Hopefully, CVAFSEQ et al has no APF requirement. It would be an unfortunate catch-22 if only an authorized program could determine with certainty why it's not running authorized... -- Edward E Jaffe Phoenix Software International, Inc 831 Parkview Drive North El Segundo, CA 90245 http://www.phoenixsoftware.com/ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
