Access to ISPF interface fails with ESP196E

book

Article ID: 186074

calendar_today

Updated On:

Products

CA Workload Automation ESP Edition

Issue/Introduction

New install - set up SAFCLASS, granted Alter access globally to Tech staff for initial bring up and validation, cannot access ISPF interface.  Executing ISPEXEC SELECT CMD(ESP SUBSYS(ESDM) MENU(CYBERMSM)) NEWAPPL(ESP) PASSLIB as in sample clist receive ESP196E ACCESS TO ESP SUBSYSTEM DENIED BY SECURITY SYSTEM.  Output from F ESDM,SAFOPTS: 

ESPD1703I SAF Options: NoMsgSupp NoDsAlloc NoMvsCmd NoUToken NoSim3rdParty NoOperCmds NoGlobalCSF

ESPD1708I SAF Class:   ESPDCLA$, Prefix ESP

Two profiles defined - at first I had only the generic and then decided to define ONLINE as well:

ESPDCLA$ ESP.**

ESPDCLA$ ESP.ONLINE

RACF says I have access:

CLASS      NAME

-----      ----

ESPDCLA$   ESP.** (G)


LEVEL  OWNER      UNIVERSAL ACCESS  YOUR ACCESS  WARNING

-----  --------   ----------------  -----------  -------

 00    $ESPCLAS        NONE              ALTER    NO


CLASS      NAME

-----      ----

ESPDCLA$   ESP.ONLINE


LEVEL  OWNER      UNIVERSAL ACCESS  YOUR ACCESS  WARNING

-----  --------   ----------------  -----------  -------

 00    TS72TMA         NONE              ALTER    NO

How do I determine what profile the check is being made against?  I have no ICH408I or similar and nothing in the task log.  



Cause

maxlength on the new class was set to 246. 

Environment

Release : 12.0

Component : CA ESP WORKLOAD AUTOMATION

Resolution

Compare new class to the IBM FACILITY class, making sure the new class maxlength matches the IBM FACILITY.