IDCAMS DEFINE ALIAS
Article ID: 131876
Updated On:
Products
Top Secret
Top Secret - LDAP
Issue/Introduction
It is possible to create a dataset alias without having access to the dataset itself?
As an example:
with no access to datasets DCDQA.$.JCL.CNTL or DCDQA.$.JCL.CNTLX
a DEFINE ALIAS ( - NAME(DCDQA.$.JCL.CNTLX) - RELATE(DCDQA.$.JCL.CNTL)) the alias is successfully created
As an example:
with no access to datasets DCDQA.$.JCL.CNTL or DCDQA.$.JCL.CNTLX
a DEFINE ALIAS ( - NAME(DCDQA.$.JCL.CNTLX) - RELATE(DCDQA.$.JCL.CNTL)) the alias is successfully created
Environment
z/os
Cause
The permission to create an alias is different to that required to create a dataset.
Alias's are all about Catalog entries.
To create an alias the following permission is required
TSS ADD(dept) IBMFAC(STGADMIN) TSS PER(userid) IBMFAC(STGADMIN.IGG.DEFDEL.UALIAS)
Which allows the creation of the alias's without the additional permissions on the Datasets themselves.
Alias's are all about Catalog entries.
To create an alias the following permission is required
TSS ADD(dept) IBMFAC(STGADMIN) TSS PER(userid) IBMFAC(STGADMIN.IGG.DEFDEL.UALIAS)
Which allows the creation of the alias's without the additional permissions on the Datasets themselves.
Resolution
If access to create Alias's is not required remove the following authority from the Userid
TSS ADD(dept) IBMFAC(STGADMIN) TSS PER(userid) IBMFAC(STGADMIN.IGG.DEFDEL.UALIAS)
TSS ADD(dept) IBMFAC(STGADMIN) TSS PER(userid) IBMFAC(STGADMIN.IGG.DEFDEL.UALIAS)
Feedback
Yes
No
Powered by
