McCabe, Ron wrote:

>I'm having a problem where one of my developers is getting "INSUFFICIENT 
>ACCESS AUTHORITY" on a dataset that I have defined in RACF and the issue is 
>that it is reporting on the generic definition.

Please post the FULL ICH408I message.


>I have defined in RACF a generic dataset definition of MAC.* (this definition 
>has a UACC of READ and only a couple of groups have update access), I also 
>have defined a complete dataset name of MAC.JSF40.TEMP.JOBHIST (this 
>definition has a UACC of READ and allows update access for my developers).  

Please post the result of LD for both profiles.

Check with LD dataset(???) DSNS to see in what profile is your dataset covered.

Did you do SETROPTS REFRESH after defining these profiles?

>When my developers run a job that wants to update the MAC.JSF40.TEMP.JOBHIST 
>dataset they get the "INSUFFICIENT ACCESS AUTHORITY" FROM MAC.* (G).

Is Enhanced Generic Naming active or not?


>Why isn't the system checking for the complete dataset which is the way I 
>thought RACF was supposed to work?

I can't answer that, just post the full messages so others can help you.

Groete / Greeting
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to