|
View previous topic :: View next topic
|
| Author |
Message |
Jishu Mukherjee
New User
Joined: 26 Oct 2016
Posts: 4
Location: India
|
|
|
|
Hi,
I want to pull the job log from EOS 31J into a Mainframe Dataset. I am trying to use SPMUT00 but getting access issues with RPSPROF.
Could you please help me to get the desired result. I am using below jcl.
//STEP1 EXEC PGM=SPMUT00
//*--------------- REQUIRED DD STATEMENTS ------------
//STEPLIB DD DSN=SYSB.EOS21.EOS31J.LINKLIB,DISP=SHR
//RSDPROF DD DSN=F8C7PO.EOS31.PROFILEJ.NQ.MD001,DISP=SHR
//RSDPARM DD DSN=F8C7PO.EOS31.PARMLIB,DISP=SHR
//RSDLOG DD SYSOUT=*
//*--------------- FUNCTION DEPENDENT DD STATEMENTS --
//EOSSP DD DSN=F8C7PO.EOS31.SPLJ9.NQ,
// DISP=SHR
//SORTIE DD DSN=XXXX.XXX.XXX
// SPACE=(TRK,(15,15),RLSE),UNIT=3390,
// DCB=(RECFM=FB,LRECL=80,BLKSIZE=0)
//SYSIN DD *
UID=RSD0
SEARCH SP=EOSSP,O=SORTIE,
SRCH='JOBNAME',
ROOT=TRO,
FDATE=032117,
TODATE=032117 |
|
| Back to top |
|
 |
Robert Sample
Global Moderator
Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA
|
|
|
|
Have you talked to your site support group? Access issues are usually related to your security product, and attempting to evade security can result in management action up to and including termination of the employee. This product is not very common, so you may also want to discuss what you want to do with the vendor to see if they have JCL to do what you want already.
Furthermore, posting the JCL you are using is USELESS! If you had posted the error message(s), that would help. If you had posted the job output, that would help. But merely posting the JCL does not provide anyone here with any useful information about your problem. There are times when posting JCL can be beneficial, but this is not one of those times. |
|
| Back to top |
|
|
Jishu Mukherjee
New User
Joined: 26 Oct 2016
Posts: 4
Location: India
|
|
|
|
I am getting below error for RSDPROF.
INSUFFICIENT ACCESS AUTHORITY
ACCESS INTENT(CONTROL) ACCESS ALLOWED(UPDATE )
As you can see that I have Update access and I am getting issue in Control Access. What is this CONTROL ACCESS. |
|
| Back to top |
|
|
Robert Sample
Global Moderator
Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA
|
|
|
|
| You DEFINITELY need to contact your site support group, the security team in particular. RACF CONTROL authority allows the user to retrieve, update, insert, or delete records in a VSAM data set; for non-VSAM data sets CONTROL is equivalent to UPDATE. Unless you have authority at your site to make RACF changes, you do not have the ability to correct this problem -- only someone who can make RACF changes has that ability. |
|
| Back to top |
|
|
steve-myers
Active Member
Joined: 30 Nov 2013
Posts: 917
Location: The Universe
|
|
|
|
In RACF terminology there are five access levels: NONE, READ, UPDATE, CONTROL, and ALTER. NONE and READ are pretty obvious. Their precise meaning is well defined for data set resources, though it gets somewhat hazy for "general" resources. ALTER also gives CONTROL, UPDATE and READ, CONTROL also gives UPDATE and READ. UPDATE also gives READ.
| Code: |
ICH408I USER(PAVANSE ) GROUP(USERG02 ) NAME(DEVIREDDYPAVAN )
JES2.RESTART.BAT CL(OPERCMDS) <---
INSUFFICIENT ACCESS AUTHORITY
FROM JES2.** (G) <---
ACCESS INTENT(CONTROL) ACCESS ALLOWED(READ ) |
I just went through a SYSLOG to find an example; this one happened to be the first one I encountered.
You didn't bother with two important lines that are usually printed; the first one tells us the resource and RACF resource class of the resource being tested and the second tells us the RACF profile used to determine access to the resource. Together the two lines tell a RACF analyst how to correct the problem. Since few of us here know the product - I certainly don't - the resource and class probably will not mean anything to us. ACCESS INTENT(CONTROL) hints you are trying to do more than just read the resource. However, as I said, the true meaning of CONTROL access is kind of hazy for many general resources. |
|
| Back to top |
|
|
Jishu Mukherjee
New User
Joined: 26 Oct 2016
Posts: 4
Location: India
|
|
|
|
| Any other suggestion on how to pull the job details from EOS31J in a dataset. |
|
| Back to top |
|
|
Robert Sample
Global Moderator
Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA
|
|
|
|
I, for one, have no idea what the RSDPROF data set is since I have never used the product. If the RSDPROF data set is required for the product, then you have two choices: (1) contact your site support group to get access, or (2) stop attempting to run your JCL.
| Quote: |
| Any other suggestion on how to pull the job details from EOS31J in a dataset. |
You are asking us how to violate your site security policy by accessing a data set you do not have adequate authority to access. Either you are attempting to do something illegal (such as stealing from your employer), or you do not want your site to know what you are doing for some other reason. You will not get anything from this -- or any -- forum to help you violate your site security policy. And if your company management finds out about your questions on this forum, there's a good chance you will be looking for a new job. |
|
| Back to top |
|
|
Jishu Mukherjee
New User
Joined: 26 Oct 2016
Posts: 4
Location: India
|
|
|
|
No , Neither I am trying to violate anything nor I am asking for any illegal help. I was asking for any other way out to bring the job details in a dataset from EOS31J.
Kindly remove your own perception on my intention. |
|
| Back to top |
|
|
Robert Sample
Global Moderator
Joined: 06 Jun 2008
Posts: 8696
Location: Dubuque, Iowa, USA
|
|
|
|
| Quote: |
| I was asking for any other way out to bring the job details in a dataset from EOS31J. |
And you have been told -- multiple times -- CONTACT YOUR SITE SUPPORT GROUP. You do not have CONTROL access to the data set that you need CONTROL access to. Either you will contact your site support group or you will NOT be able to run that job. If there is a way to do what you want without having CONTROL access to the data set, the vendor documentation (which, if your site has a license for the product, you have access to -- whether hardcopy on site or through the company intranet or from the vendor web site) will tell you how to do that. But as the JCL is written, the ONLY way to run your job is to CONTACT YOUR SITE SUPPORT GROUP to get the appropriate authority. There is nothing you can do to run that job as it exists. And the fact that you keep coming back to this forum instead of contacting your site support group tells us that, at the least, what you want to do is not something you want your company to know about. Those of us who respond on this forum over the years have seen many such attempts to avoid the site security. They all say they have permission -- yet they never want to contact their site support group (because they know they do not have permission).
And after 10 minutes it is not possible to change a post on this forum, so the previous posts stay as written. |
|
| Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007
Posts: 10873
Location: italy
|
|
|
|
| Quote: |
| No , Neither I am trying to violate anything nor I am asking for any illegal help. I was asking for any other way out to bring the job details in a dataset from EOS31J. |
just use a bit of logic, please
if there was another method which could bypass the security mechanism
why bother to secure the method You were attempting to use
to get the same info ??? |
|
| Back to top |
|
|
|
|
