Portal | Manuals | References | Downloads | Info | Programs | JCLs | Master the Mainframes
IBM Mainframe Computers Forums Index
 
Register
 
IBM Mainframe Computers Forums Index Mainframe: Search IBM Mainframe Forum: FAQ Memberlist Usergroups Profile Log in to check your private messages Log in
 

 

Tivoli OPC-Authorization problem

 
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics
View previous topic :: :: View next topic  
Author Message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:28 pm    Post subject: More RACF resource classes for OPC/TWS
Reply with quote

Hi Enrico,

After looking at RACF resource classes for OPC/TWS I have a question....

In OPC 9.5 option (Delete CP & reset LTP) I am getting authorization error. Error message is "EQQU000E You are not authorized to use function REFRESH LONG TERM PLAN"

I have gone through few members of TWSvrl.SEQQSAMP but couldn't found more details. Can you please guide me on this.

Thanks.
Back to top
View user's profile Send private message

RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:31 pm    Post subject: Tivoli OPC-Authorization problem
Reply with quote

Hi guys,

We are using 'Operations Planning & Control' for job scheduling.
In OPC 9.5 option (Delete CP & reset LTP) I am getting authorization error. Error message is "EQQU000E You are not authorized to use function REFRESH LONG TERM PLAN"

Can anyone please guide me on this?
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2422
Location: Netherlands, Amstelveen

PostPosted: Wed May 19, 2010 8:39 pm    Post subject:
Reply with quote

Sure,

talk with the scheduling people.

They are the ones to modify Current Plan and/or Long Term Plan
data.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:45 pm    Post subject:
Reply with quote

Hi Peter,

I am having authority to modify CP & LTP. Even I can use other options such as 9.2 (Activate Job Submission) or all Deactivate options in Service functions.
I am getting above mentioned error only while using 9.5 option.
It seems this has been protected through some OPC CLASS. But not bale to trace the class or resolution to this.

Thanks
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2422
Location: Netherlands, Amstelveen

PostPosted: Wed May 19, 2010 8:51 pm    Post subject:
Reply with quote

Hello RK1,

once again talk with the scheduling support.
Modifying, job submission is probably ok, but deleting/resettting is quite another story.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Wed May 19, 2010 8:55 pm    Post subject:
Reply with quote

OK. Thanks Peter.

Actully my ID (RACF profile) has been replicated from PROD LPAR to TEST LPAR. Surprisingly I have authority (9.5) in TEST LPAR & not in PROD. Anyways I will consult with security admin team.
Thanks agin.

Appreciate replies from other users as well.
Back to top
View user's profile Send private message
dick scherrer

Site Director


Joined: 23 Nov 2006
Posts: 19270
Location: Inside the Matrix

PostPosted: Wed May 19, 2010 10:09 pm    Post subject:
Reply with quote

Hello,

Quote:
Surprisingly I have authority (9.5) in TEST LPAR & not in PROD.
This should not be a surprise. It is rather common for people to have more authority/permissions in TEST than in PROD.

Why should someone outside the scheduling/operatoins group(s) have this level of access to PROD? Additions/changes/deletions from PROD should be implemented by the prople who run the Production environment - not the developers.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Thu May 20, 2010 1:23 pm    Post subject:
Reply with quote

Hi Dick,

I do have schedulling authority in PROD as well & I am working on PROD environment PSG/OPS resource. I said 'Surprisingly' because as stated above my RACF ID profile is exactly replicated from PROD to TEST region so if ID has level of access to use 9.5 option in TEST then it should also work in PROD.
But this may be be restriceted in PROD as a precaution only. So I need more information on this to get correct access to my ID.

Thanks.
Back to top
View user's profile Send private message
PeterHolland

Global Moderator


Joined: 27 Oct 2009
Posts: 2422
Location: Netherlands, Amstelveen

PostPosted: Thu May 20, 2010 1:37 pm    Post subject:
Reply with quote

EQQU000E YOU ARE NOT AUTHORIZED TO USE FUNCTION UUFUNC
Explanation: You have attempted to use function UUFUNC, but you are not authorized.
System action: The request is rejected.
User response: If you want to use UUFUNC, contact your security administrator.

Scheduling authority is not the same as maintenance authority.
Back to top
View user's profile Send private message
RK1

New User


Joined: 15 Jul 2009
Posts: 17
Location: pune

PostPosted: Thu May 20, 2010 1:40 pm    Post subject:
Reply with quote

Thanks Peter. Let me check with Security Team.
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic    IBMMAINFRAMES.com Support Forums -> All Other Mainframe Topics All times are GMT + 6 Hours
Page 1 of 1

 

Search our Forum:

Similar Topics
Topic Author Forum Replies Posted
No new posts SYMNAMES problem jacobdng DFSORT/ICETOOL 7 Thu Dec 22, 2016 7:47 am
No new posts Problem in writing Output file vickey_dw COBOL Programming 5 Mon Nov 14, 2016 11:14 pm
No new posts Problem in Running Query via JCL vickey_dw DB2 3 Tue Oct 18, 2016 11:11 pm
No new posts DB2 Streaming Batch Processing Problem Manshadi DB2 4 Sat Sep 24, 2016 12:14 pm
No new posts Problem with GETMAIN command amitc23 CICS 6 Thu Sep 01, 2016 1:01 pm


Facebook
Back to Top
 
Mainframe Wiki | Forum Rules | Bookmarks | Subscriptions | FAQ | Tutorials | Contact Us