Endevor issues error on SYS1.PARMLIB looking for DFHAPIR

Products

• Endevor

Issue/Introduction

Certain Endevor operations are receiving read access violations against SYS1.PARMLIB due to the CICS Command Translator looking for the DFHAPIR member that defines restricted API and SPI EXEC CICS commands. 

Is there a way to suppress this error in Endevor other than granting the userid read access to the parmlib dataset? 

Environment

 CICS 5.5 

Resolution

The error message can appear in two different ways:

 

1. 11.51.17 J0653016  ICH408I USER(xxxxxxx ) GROUP(xxxxxxx ) NAME(xxx CHG CONTROL     )  ###

              SYS1.PARMLIB CL(DATASET ) VOL(xxxxxx)

              INSUFFICIENT ACCESS AUTHORITY

              FROM SYS1.PARMLIB.** (G)

              ACCESS INTENT(READ   )  ACCESS ALLOWED(NONE   )

 

2  IEF764I xxxxxxxx ENDES000 DFHAPIR DFHEIMOD PARMLIB READ FAILED - MEMBER DFHAPIR NOT FOUND

 

 

Based on the above errors - read access needs to be granted to the user - please note that this was a direct result of a new requirement/function for CICS 5.5 - Controlling the use of specific CICS API and SPI commands

For more information and CICS 5.5 Requirements please contact IBM directly. 

 

Additional Information

By creating  RACF profiles in the FACILITY class, will bypass DFHAPIR processing. 

The DFHAPIR processing error can be ignored. They DO NOT affect the processing of the CICS commands.

In summary, to entirely skip the processing of DFHAPIR member and suppress READ violation messages, the userid running the precompile needs to have READ access to resource DFHAPIR.lpar in the FACILITY class. The DFHAPIR member purpose is to restrict commands in the user's program. This is strictly a CICS function which will flag at translate time and not at runtime.