JCLCheck : How to suppress ICH408I messages on Proclibs

Products

• JCLCheck Workload Automation

Issue/Introduction

RACF errors are issued during a JCLCheck execution because the user who submits the JCLCheck job does not have the proper authorization to PROCLIBs from the JES2/JES3 address space, or PROCLIBs referenced on a JCLLIB statement

ICH408I USER(user id ) GROUP(group name)   ) NAME(name,...)    
   proclib data set name CL(DATASET ) VOL(*BLANK)                
   INSUFFICIENT ACCESS AUTHORITY                                     
   FROM .... (G)  

 
How to suppress this error? 

Resolution

Use JCLCheck runtime option SEC(NOLOG).   Sub option NOLOG turns off logging of security violations.  This can prevent USERID suspension due to security violations. 

JCLCheck will still issue the following warning message to indicate that the proclib cannot be accessed:  

    CAY6488W PROCLIB "proclibname" NOT DEFINED. READ ACCESS DENIED BY SECURITY 

When the proclib is referenced on a JCLLIB statement, the message will be: 

   CAY6329E ACCESS DENIED TO "proclibname" BY SECURITY, RC = 8 ACCESS  LEVEL =  READ FOR ACID = "user id"