Running batch utility DDTRSLM to export a SQL plan receiving error message:
DDTRS0015E GET_SQLN FAILED DSF COMMAND GETENTIT, RC: XTS.
This is an external security problem. What needs to be defined in external security?
Release : 15.1
Component : CA DATACOM/DB
The XTS016 error indicates the user does not have external security access to perform the function:
USER NOT AUTHORIZED
You attempted to perform a function for which you are not authorized in the external security product operating on your system.
Contact the person responsible for the security administration of your system for the appropriate change to your security profile.
The DTUTIL resource class is used to control access to Datadictionary facilities including DDTRSLM.
In RACF the class name is DT@TIL.
The name of the resource class to use for DDTRSLM is cxxname.DD0nnnn.DDTRSLM where nnnnn is the dbid of datadicionary.
For example, if using a cxxname of TESTCXX the resource name would be TESTCXX.DD00002.DDTRSLM
In RACF define the resource like this:
RDEF DT@TIL TESTCXX.DD00002.DDTRSLM UACC(NONE)
Then grant READ access to a user with a PERMIT command:
PERMIT TESTCXX.DD00002.DDTRSLM CLASS(DT@TIL) ACCESS(READ) ID(userid)
The user also needs to be granted access to the datadictionary entity using the resource class name of cxxname.DD0nnnn.table.stat.fnc
For example to grant access to all PLANs:
RDEF DT@TIL TESTCXX.DD00002.PLN.** UACC(NONE)
PERMIT TESTCXX.DD00002.PLN.** CLASS(DT@TIL) ACCESS(READ) ID(userid)
To grant access to all entities:
RDEF DT@TIL TESTCXX.DD00002.** UACC(NONE)
PERMIT TESTCXX.DD00002.** CLASS(DT@TIL) ACCESS(READ) ID(userid)