IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

Access to restricted PDS or PS data sets


IBM Mainframe Forums -> TSO/ISPF
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
ramadas

New User


Joined: 10 Mar 2007
Posts: 2
Location: Australia

PostPosted: Wed Mar 14, 2007 5:13 pm
Reply with quote

Need some help on accessing restricted PDS or data set.

Say if my user id is myuser1. Other users cannot access the PDS which has my id as first qualifier.
Ex: there are 2 users. myuser1 and myuser2.
myuser2 can not access PDS myuser1.sample.test

Where can we give authorize or give permissions to access the PDS myuser1.sample.test?
Back to top
View user's profile Send private message
cpuhawg

Active User


Joined: 14 Jun 2006
Posts: 331
Location: Jacksonville, FL

PostPosted: Wed Mar 14, 2007 6:21 pm
Reply with quote

If your shop uses RACF (not ACF2 or TOP SECRET) and your USERID is protected by a RACF dataset profile (i.e. myuser1.**), then it is possible to allow other users to access your dataset.

To see if your myuser1 is protected, enter:
Code:

TSO SR MASK(myuser1)

on the command line.

If you recieve 'NO ENTRIES MEET SEARCH CRITERIA' then you will need to contact your Security Administration area and have them assist.

If you recieve 'myuser1.**' (G) then you can enter the following command to permit access:

Code:

TSO PE 'myuser1.**' ID(myuser2) ACC(READ) GEN


Instead of READ, you can also use UPDATE or ALTER, however, UPDATE will allow them to save members in your PDS and ALTER will allow them to actually delete the PDS.
Back to top
View user's profile Send private message
ramadas

New User


Joined: 10 Mar 2007
Posts: 2
Location: Australia

PostPosted: Wed Mar 14, 2007 9:30 pm
Reply with quote

as given I got this

'myuser1.**' (G)

and when entered next command it didnt throw any error message and still I didnt get any access (authorization failed) to view or browse the file.
Back to top
View user's profile Send private message
cpuhawg

Active User


Joined: 14 Jun 2006
Posts: 331
Location: Jacksonville, FL

PostPosted: Wed Mar 14, 2007 10:24 pm
Reply with quote

Have myuser2 try it.

You can also do a display to ensure your change worked:
Code:

TSO LD DA(myuser1.**) auth all


At the bottom, you should see the myuser2 ID with whatever access (i.e. READ, UPDATE, ALTER) you provided.
Back to top
View user's profile Send private message
Hari Hara Krishnan N

New User


Joined: 16 Mar 2007
Posts: 5
Location: Chennai

PostPosted: Fri Mar 16, 2007 10:41 am
Reply with quote

If some one opens the Common library in the edit mode it creates a lot of problems to others working on it. Is there any way to prevent the users from opening the common libraries in the edit mode.
Back to top
View user's profile Send private message
expat

Global Moderator


Joined: 14 Mar 2007
Posts: 8797
Location: Welsh Wales

PostPosted: Fri Mar 16, 2007 1:17 pm
Reply with quote

Of course, after creating the acces for myuser2 to access the files of myuser1, you need to do either a SETR REFRESH which only RACF administrators can do, or to get myuser2 to log off and log on aggin to pick up the changes.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> TSO/ISPF

 


Similar Topics
Topic Forum Replies
No new posts How to save SYSLOG as text data via P... All Other Mainframe Topics 4
No new posts Store the data for fixed length COBOL Programming 1
No new posts Access to non cataloged VSAM file JCL & VSAM 18
No new posts How to access web services/website? Mainframe Interview Questions 4
No new posts Data set Rec-Cnt and Byte-Cnt Testing & Performance 2
Search our Forums:

Back to Top