IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

Tivoli OPC-Authorization problem


IBM Mainframe Forums -> All Other Mainframe Topics
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:28 pm
Reply with quote

Hi Enrico,

After looking at RACF resource classes for OPC/TWS I have a question....

In OPC 9.5 option (Delete CP & reset LTP) I am getting authorization error. Error message is "EQQU000E You are not authorized to use function REFRESH LONG TERM PLAN"

I have gone through few members of TWSvrl.SEQQSAMP but couldn't found more details. Can you please guide me on this.

Thanks.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:31 pm
Reply with quote

Hi guys,

We are using 'Operations Planning & Control' for job scheduling.
In OPC 9.5 option (Delete CP & reset LTP) I am getting authorization error. Error message is "EQQU000E You are not authorized to use function REFRESH LONG TERM PLAN"

Can anyone please guide me on this?
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen

PostPosted: Wed May 19, 2010 8:39 pm
Reply with quote

Sure,

talk with the scheduling people.

They are the ones to modify Current Plan and/or Long Term Plan
data.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:45 pm
Reply with quote

Hi Peter,

I am having authority to modify CP & LTP. Even I can use other options such as 9.2 (Activate Job Submission) or all Deactivate options in Service functions.
I am getting above mentioned error only while using 9.5 option.
It seems this has been protected through some OPC CLASS. But not bale to trace the class or resolution to this.

Thanks
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen

PostPosted: Wed May 19, 2010 8:51 pm
Reply with quote

Hello RK1,

once again talk with the scheduling support.
Modifying, job submission is probably ok, but deleting/resettting is quite another story.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:55 pm
Reply with quote

OK. Thanks Peter.

Actully my ID (RACF profile) has been replicated from PROD LPAR to TEST LPAR. Surprisingly I have authority (9.5) in TEST LPAR & not in PROD. Anyways I will consult with security admin team.
Thanks agin.

Appreciate replies from other users as well.
Back to top
View user's profile Send private message
dick scherrer

Moderator Emeritus


Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix

PostPosted: Wed May 19, 2010 10:09 pm
Reply with quote

Hello,

Quote:
Surprisingly I have authority (9.5) in TEST LPAR & not in PROD.
This should not be a surprise. It is rather common for people to have more authority/permissions in TEST than in PROD.

Why should someone outside the scheduling/operatoins group(s) have this level of access to PROD? Additions/changes/deletions from PROD should be implemented by the prople who run the Production environment - not the developers.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Thu May 20, 2010 1:23 pm
Reply with quote

Hi Dick,

I do have schedulling authority in PROD as well & I am working on PROD environment PSG/OPS resource. I said 'Surprisingly' because as stated above my RACF ID profile is exactly replicated from PROD to TEST region so if ID has level of access to use 9.5 option in TEST then it should also work in PROD.
But this may be be restriceted in PROD as a precaution only. So I need more information on this to get correct access to my ID.

Thanks.
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2481
Location: Netherlands, Amstelveen

PostPosted: Thu May 20, 2010 1:37 pm
Reply with quote

EQQU000E YOU ARE NOT AUTHORIZED TO USE FUNCTION UUFUNC
Explanation: You have attempted to use function UUFUNC, but you are not authorized.
System action: The request is rejected.
User response: If you want to use UUFUNC, contact your security administrator.

Scheduling authority is not the same as maintenance authority.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Thu May 20, 2010 1:40 pm
Reply with quote

Thanks Peter. Let me check with Security Team.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> All Other Mainframe Topics

 


Similar Topics
Topic Forum Replies
No new posts Map Vols and Problem Dataset All Other Mainframe Topics 2
No new posts z/vm installation problem All Other Mainframe Topics 0
No new posts Job scheduling problem. JCL & VSAM 9
No new posts Problem with IFTHEN=(WHEN=GROUP,BEGIN... DFSORT/ICETOOL 5
No new posts Need to add field to copybook, proble... COBOL Programming 14
Search our Forums:

Back to Top