MVSFORUMS.com Forum Index MVSFORUMS.com
A Community of and for MVS Professionals
 
 FAQFAQ   SearchSearch   Quick Manuals   RegisterRegister 
 ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in 

Permit Read Access w/o RACF
Goto page 1, 2  Next
 
Post new topic   Reply to topic   printer-friendly view    MVSFORUMS.com Forum Index -> TSO and ISPF
View previous topic :: View next topic  
Author Message
Dibakar
Advanced


Joined: 02 Dec 2002
Posts: 700
Topics: 63
Location: USA

PostPosted: Fri Jul 18, 2003 3:03 am    Post subject: Permit Read Access w/o RACF Reply with quote

Hi,

RACF is disabled here and I want to give others read access to my datasets. how can I do this?

Diba.
Back to top
View user's profile Send private message Send e-mail
Cogito-Ergo-Sum
Advanced


Joined: 15 Dec 2002
Posts: 637
Topics: 43
Location: Bengaluru, INDIA

PostPosted: Fri Jul 18, 2003 3:04 am    Post subject: Reply with quote

Diba,
See if TSO PERMIT command helps you.
_________________
ALL opinions are welcome.

Debugging tip:
When you have eliminated all which is impossible, then whatever remains, however improbable, must be the truth.
-- Sherlock Holmes.
Back to top
View user's profile Send private message
Dibakar
Advanced


Joined: 02 Dec 2002
Posts: 700
Topics: 63
Location: USA

PostPosted: Fri Jul 18, 2003 3:44 am    Post subject: Reply with quote

Nope.
Back to top
View user's profile Send private message Send e-mail
Ashish Jain
Beginner


Joined: 09 Dec 2002
Posts: 15
Topics: 0
Location: India

PostPosted: Fri Jul 18, 2003 6:27 am    Post subject: Reply with quote

RACF is disabled...does it mean, its not there in your shop or you have no authorithy to invoke any of the RACF commands?

If RACF (or any other Access Control Tool) is not there, then I guess everyone should be able to read everyone's data.
Back to top
View user's profile Send private message Send e-mail Visit poster's website Yahoo Messenger
Dibakar
Advanced


Joined: 02 Dec 2002
Posts: 700
Topics: 63
Location: USA

PostPosted: Fri Jul 18, 2003 7:57 am    Post subject: Reply with quote

There is RACF but when I try to invoke it I get the message 'RACF IS DISABLED'. Actually I am able to see other's datasets but they can't see mine.
Back to top
View user's profile Send private message Send e-mail
Manas Biswal
Intermediate


Joined: 29 Nov 2002
Posts: 382
Topics: 27
Location: Chennai, India

PostPosted: Fri Jul 18, 2003 1:41 pm    Post subject: Reply with quote

What error message does TSO PERMIT command give you?.
If it gives you a message like "Dataset not defined to RACF" then , perhaps doing a TSO ADDSD might define your dataset to RACF and after that you can continue with tso permit.

Regards,
manas
Back to top
View user's profile Send private message Send e-mail Yahoo Messenger
Dibakar
Advanced


Joined: 02 Dec 2002
Posts: 700
Topics: 63
Location: USA

PostPosted: Mon Jul 21, 2003 3:03 am    Post subject: Reply with quote

This is the complete message I get on 'TSO PERMIT' -
Code:
    IRR418I RACF PRODUCT DISABLED: COMMAND ENDED.
    ***                                             


Diba.
Back to top
View user's profile Send private message Send e-mail
Mike
Beginner


Joined: 03 Dec 2002
Posts: 114
Topics: 0
Location: Sydney, Australia

PostPosted: Mon Jul 21, 2003 5:58 pm    Post subject: Reply with quote

What messages do the people trying to access your dataset get ? Try this and also issuing the permit command in batch as the joblog may provide further information/messages.

The IRR418I message indicates that the IFAPRD?? member in SYS1.PARMLIB determines if RACF is enabled/disabled, check this member out (not sure how you determine which ?? is actually in use). The message has COMMAND as opposed to the other possible values. I'm just wondering if it's only the RACF command processing that has been disabled, if that's at all possible.
_________________
Regards,
Mike.
Back to top
View user's profile Send private message
Dibakar
Advanced


Joined: 02 Dec 2002
Posts: 700
Topics: 63
Location: USA

PostPosted: Mon Jul 21, 2003 11:36 pm    Post subject: Reply with quote

Mike,

Glad that you asked these questions. I don't have access to SYS1.PARMLIB either -
Code:
ACF99913 ACF2 VIOLATION-00,00,TS09065,LMVS00,SYS1.PARMLIB,N/A    
ACF90913  -DATASET CANNOT BE OPENED; AUTHORIZATION IS REQUIRED.
***                                                               


Atleast now I know that it is ACF2 and not RACF problem. Still, I don't know anything about ACF2.

Modified question - "How to give access to others by ACF2?".

Regards,
Diba.
Back to top
View user's profile Send private message Send e-mail
Manas Biswal
Intermediate


Joined: 29 Nov 2002
Posts: 382
Topics: 27
Location: Chennai, India

PostPosted: Tue Jul 22, 2003 3:02 pm    Post subject: Reply with quote

I would talk to my sys adm about it.

Regards,
manas
Back to top
View user's profile Send private message Send e-mail Yahoo Messenger
kolusu
Site Admin
Site Admin


Joined: 26 Nov 2002
Posts: 12375
Topics: 75
Location: San Jose

PostPosted: Tue Jul 22, 2003 5:35 pm    Post subject: Reply with quote

Dibakar,

  • Enter "ACF" (from TSO/ISPF option 6).
    (Then you will get the ACF2 ready message which is "ACF")
  • Enter "DECOMP TID INTO(DATASET)".
    ("DATASET" can be any name or member of a PDS)
  • Enter "END".
    (This will get you out of ACF2 and back in the command
    option)
  • Use normal edit to modify the rule set which is stored in the
    dataset you specified in step 2.
  • Leave the edit mode and return to TSO/ISPF option 6.
  • Enter "ACF".
  • From ACF enter "COMPILE DATASET(TID)".
    (This will check to make sure there are no syntax errors
    in your ACF2 rules. If there are any problems, re-edit
    your "DATASET(TID)" and correct them.)
  • Enter "STORE".
    (This will save your new ACF2 rules.)
  • Enter "END".


Hope this helps...

cheers

kolusu
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Dibakar
Advanced


Joined: 02 Dec 2002
Posts: 700
Topics: 63
Location: USA

PostPosted: Wed Jul 23, 2003 3:11 am    Post subject: Reply with quote

Kolusu,
I am getting error, "ACF03005 RULE RECORD NOT FOUND", when I give "DECOMP .." command.

Manas,
I would like to contact sys adm but since they are in a different company and country its not easy to contact them.

Diba.
Back to top
View user's profile Send private message Send e-mail
kolusu
Site Admin
Site Admin


Joined: 26 Nov 2002
Posts: 12375
Topics: 75
Location: San Jose

PostPosted: Wed Jul 23, 2003 8:37 am    Post subject: Reply with quote

Dibakar,

Check with your co-workers who you think has ACF2 authorization and decomp his rule set. Then copy that ruleset onto your dataset and edit the rules. Once edited you can directly jump to step 6 and proceed onwards.

Hope this helps...

cheers

kolusu
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Dibakar
Advanced


Joined: 02 Dec 2002
Posts: 700
Topics: 63
Location: USA

PostPosted: Mon Jul 28, 2003 7:36 am    Post subject: Reply with quote

Kolusu,

Thanks for your effort. I could not get it from my team mates either. Now my team lead is talk with system adm people.

Diba.
Back to top
View user's profile Send private message Send e-mail
kolusu
Site Admin
Site Admin


Joined: 26 Nov 2002
Posts: 12375
Topics: 75
Location: San Jose

PostPosted: Mon Jul 28, 2003 5:20 pm    Post subject: Reply with quote

Dibakar,

Try this. This is sample of my ACF2 rule set.

Code:

$KEY(YOUR TID)
 - UID(CH**********OTHER TID) READ(A)
 - UID(CH**********OTHER TID) READ(A) WRITE(A)
 - UID(CH**********OTHER TID) READ(A) WRITE(A) ALLOC(A)
 - UID(CH**********OTHER TID) READ(A) WRITE(A) ALLOC(A) EXEC(A)


Read (A)- Browse capability."R" can be used instead of "READ".Here A in the parenthesis stands for Allow

WRITE(A) - Edit capability.you can use W instead of WRITE

ALLOCATE = Delete and create capability. "A" can be used instead of
"ALLOCATE"

EXECUTE = Execute capability. "E" can be used instead of "EXECUTE"

Let us say your TID is T1234AB , and you want to give access to T1111XX,
T2222YY, T3333ZZ & T4444CC then your rule set will look like the following.

Code:

$KEY(T1234AB)
 - UID(CH**********T1111XX) READ(A)
 - UID(CH**********T2222YY) READ(A) WRITE(A)
 - UID(CH**********T3333ZZ) READ(A) WRITE(A) ALLOC(A)
 - UID(CH**********T4444CC) READ(A) WRITE(A) ALLOC(A) EXEC(A)


save this is a member of a pds. And now jump to step 6 in the procedure
shown above.

Hope this helps...

cheers

kolusu
Back to top
View user's profile Send private message Send e-mail Visit poster's website
Display posts from previous:   
Post new topic   Reply to topic   printer-friendly view    MVSFORUMS.com Forum Index -> TSO and ISPF All times are GMT - 5 Hours
Goto page 1, 2  Next
Page 1 of 2

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum


MVSFORUMS
Powered by phpBB © 2001, 2005 phpBB Group