IDCAMS DEFINE ALIAS

book

Article ID: 131876

calendar_today

Updated On:

Products

CA Top Secret CA Top Secret - LDAP

Issue/Introduction

It is possible to create a dataset alias without having access to the dataset itself?
As an example:
with no access to datasets DCDQA.$.JCL.CNTL or DCDQA.$.JCL.CNTLX
a DEFINE ALIAS ( - NAME(DCDQA.$.JCL.CNTLX) - RELATE(DCDQA.$.JCL.CNTL)) the alias is successfully created

Cause

The permission to create an alias is different to that required to create a dataset.

Alias's are all about Catalog entries.
To create an alias the following permission is required
TSS ADD(dept) IBMFAC(STGADMIN) TSS PER(userid) IBMFAC(STGADMIN.IGG.DEFDEL.UALIAS)
Which allows the creation of the alias's without the additional permissions on the Datasets themselves.

Environment

z/os

Resolution

If access to create Alias's is not required remove the following authority from the Userid

TSS ADD(dept) IBMFAC(STGADMIN) TSS PER(userid) IBMFAC(STGADMIN.IGG.DEFDEL.UALIAS)