JCLCheck CAY6321E error message for DISP=OLD

Products

• JCLCheck Workload Automation

Issue/Introduction

A dataset name with DISP=OLD gets JCLCheck security violation error: 

 

       CAY6321E SECURITY VIOLATION DETECTED "DATASET ACCESS LEVEL=UPDATE".

 

The dataset is used only for READ access, and the batch acid has READ access.

JCLCheck does not issue an error if the JCL is changed to DISP=SHR for the same dataset.

Environment

Release : 12.0

Component : JCLCheck workload Automation

Cause

DISP=OLD dataset requires exclusive access so JCLCheck needs to validate the update access.

Resolution

Use DISP=SHR since the dataset is used only for READ access, and the batch acid has READ access.

Additional Information

JCLCheck runtime options:

- SECurity(SHRupd): Performs a security check for ACCESS=UPDATE on DISP=SHR data set

- SECurity(NOSHRupd): Performs a security check for ACCESS=READ on DISP=SHR data set.  Use this option if the program only reads the file.

Reference:

https://techdocs.broadcom.com/us/en/ca-mainframe-software/automation/ca-jclcheck-workload-automation/12-0/reference/jclcheck-runtime-options/description-of-runtime-options/security.html