PKEX500E message when displaying an Endevor Package

Products

• Endevor
• Endevor - ECLIPSE Plugin
• Endevor - Enterprise Workbench

Issue/Introduction

When displaying a package that  is moving elements from CERT to PROD the below errors is issued: 

PKEX500E PACKAGE PROCESSING DENIED BY SECURITY EXIT RC(0000C) RSN(0000).

Environment

Release : 18.1

Component : CA Endevor Software Change Manager

Resolution

When the message PKEX500E PACKAGE PROCESSING DENIED BY SECURITY EXIT RC(0000C) RSN(0000) is issued it mean that person performing the action against the package does not have the proper authority to do so. To determine where the security failuer is taking place, recreate the problem and enable the Endevor ESI Trace. The trace can be enabled in batch or foreground.  To enable the Endevor ESI Trace: 

Foreground

To start the trace in foreground 1 of the below command on the ISPF Command line: 

1.  TSO %ESITRACE START - this write the trace to your terminal

 

OR 

2.  TSO %ESITRACE DATASET DSN(ESI.TRACE) NEW CAT
 -  Writes trace records to dsn = userid.ESI.TRACE

TO STOP THE TRACE: 

TSO %ESITRACE STOP

Batch:

Add the following DD statements to you JCL: 

//BSTERR DD SYSOUT=*

//EN$TRESI DD SYSOUT=*

An example of what the trace could look like for the error  PKEX500E PACKAGE PROCESSING DENIED BY SECURITY EXIT RC(0000C) RSN(0000)

In this particular situation, the user does not have access to 3 different entities:

0 ENCS101I Format=0002 Pass=0000 Auth=READ ACEE=00000000 C1SSBPOP SECCRUTN+00092E
ENCS101I Class=$ENDEVOR Log=NONE Func=ENVRNMGR
ENCS101I Scale=0....+....1....+....2....+....3....+....4....+....5....+....6
ENCS101I Entity=$ENDV.DEV.PMENU.ENVRMENT
ENCS101I User xxxxxx  access is denied from LAT
ENCS101I RACROUTE RC=0008 RACHECK RC=0008 Reason=0000

0 ENCS101I Format=0006 Pass=0000 Auth=READ ACEE=00000000 BC1PPKEX PKGSECXI+009968
ENCS101I Class=$ENDEVOR Log=NONE Func=PDISPLAY
ENCS101I Scale=0....+....1....+....2....+....3....+....4....+....5....+....6
ENCS101I Entity=$ENDV.PACKAGE.DISPLAY.PACKAGE.CIPSCOB
ENCS101I User xxxxxxx  access is denied from LAT
ENCS101I RACROUTE RC=0008 RACHECK RC=0008 Reason=0000


0 ENCS101I Format=0006 Pass=0000 Auth=READ ACEE=00000000 BC1PPKEX PKGSECXI+009968
ENCS101I Class=$ENDEVOR Log=NONE Func=PDISPLAY
ENCS101I Scale=0....+....1....+....2....+....3....+....4....+....5....+....6
ENCS101I Entity=$ENDV.PACKAGE.DISPLAY.PACKAGE.CIPSCOB
ENCS101I User xxxxxxx access is denied from LAT
ENCS101I RACROUTE RC=0008 RACHECK RC=0008 Reason=0000

To resolve the problem, provide this information to the Security admin, determine if the person should have access or not and update the security rules accordingly.