Thanks Bob.
Sent from Yahoo Mail for iPhone On Friday, March 13, 2020, 7:09 AM, Robert S. Hansel (RSH) <[email protected]> wrote: Hi Bill, In general, users automatically get full ALTER access to their own output, so I doubt JESSPOOL is the issue. If they are attempting to delete output from within SDSF, they also need access to SDSF panels and operator commands. These are controlled by RACF profiles in the SDSF, GSDSF, and OPERCMDS classes, or if they are not protected by RACF, then by SDSF's ISFPARMS. You can use SDSF's SECTRACE to help debug the problem. Have a user execute SET SECTRACE ON or WTP at the SDSF command line (ON sends the results to ULOG; WTP to SYSLOG). Have the user attempt to delete output. Then, assuming they specified ON, have the user execute the ULOG command to see the RACF calls and their results. This assumes the user has authority to use ULOG - SDSF class resource ISFCMD.ODSP.ULOG.jesname or the ISFPARMS equivalent. Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel www.twitter.com/RSH_RACF www.rshconsulting.com --------------------------------------------------------------------------- Upcoming RSH RACF Training - WebEx - RACF Audit & Compliance Roadmap - OCT 19-23, 2020 - RACF Level I Administration - APR 27 - MAY 1, 2020 - RACF Level II Administration - APR 6-10, 2020 - RACF Level III Admin, Audit, & Compliance - NOV 2-6, 2020 - RACF - Securing z/OS UNIX - SEPT 28 - OCT 2, 2020 --------------------------------------------------------------------------- -----Original Message----- Date: Thu, 12 Mar 2020 20:09:24 +0000 From: Bill Johnson <[email protected]> Subject: JESSPOOL I’m not a RACF expert and need help giving a user the ability to delete their own SDSF output. Not really sure why they don’t have it. Not my setup. Is it an easy 1 command fix or more complex? Thanks ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
