View - Report Deletion Authority

Products

• OM Deliver
• OM View

Issue/Introduction

While trying to delete a report, received 'COMMAND DENIED' message on the View online panel:

Long message: SARSRQUX-YOU ARE UNAUTHORIZED TO USE THE COMMAND                              

The client has a modified SARSRQUX exit. In the exit movement is through a UserID table, to validate authority to perform command functions.

Used external security with ALTER access being granted on View REPT resource rules. 

Cause

On the panel in question, the message "COMMAND DENIED" appears, which was generated by the client's modified SARSRQUX exit.

In this instance, an end-user was denied the ability to delete a report. The SARINIT parameters had DELETE=YES, which means that View is allowing report deletion, by use of line command "D" or "DD".

This Online delete ability was being overridden by the SARSRQUX exit.

For security, SARINIT parameters SECID=VIEW and SECURITY=EXTERNAL were used.

Even with the definition of security rules providing coverage for the REPT resource, it again appeared that the SARSRQUX exit is overriding anything else, in displaying the "DENIED" message.

Resolution

In the SARSRQUX code, the problem appeared to be with the results of a table lookup. The code written to see if a "D" is being issued, and then check a table of TSOIDs. The table check was dropping through, so there was the issuing of the "DENIED" message. The client added new TSOIDs, of an invalid length to the table, which caused the problem.

They corrected the code with correct length and no longer seeing the DENIED message, and everything working as expected.