Dataset access - rule is in place to allow access yet access denied?
search cancel

Dataset access - rule is in place to allow access yet access denied?

book

Article ID: 13008

calendar_today

Updated On:

Products

Top Secret Top Secret - LDAP

Issue/Introduction



Dataset access - rule is in place to allow access yet access denied?

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

Issue the command TSS MODI FAC(facility name) check the Attributes to see if 

you have RES or NORES set for DB2DDF. If you have NORES change to RES 

TSS MODI FAC(facname=RES) 

example: 

TSS9552I ATTRIBUTES=NOPROMPT,NOAUDIT,NORES,WARNPW, 

 

Dataset's are a MASKABLE resource. 

RES provides for the interpretation and recognition of maskable resources 

within the facility. Without RES on the facility, security checks against 

these resource classes will fail. 

With the NORES attribute on the facility, the permissions for the maskable 

resources like DATASET are not loaded into the user's security record 

when the user signs on to an address space that is associated with that 

Facility.

 

Additional Information

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en