TSS7220E and TSS7221E Top Secret security violations occur when using CA JCLCheck and CA Allocate with PLSOPT30(Y) setting.

Products

• CA JCLCheck Workload Automation

Issue/Introduction

JCL containing steps that create datasets GDGs get security violations that result in the user being suspended
by Top Secret. This occurs from JCLCheck in foreground, TSO and also batch JCLCheck processing.

Cause

 VAM allocations being performed by CA Allocate result in a security violation being issued by Top Secret.

Environment

Release : 12.0

Component : CA JCLCheck workload Automation

Resolution

When using  JCLCheck to validate a JCL stream and the CA Allocate SYSPARM  PLSOPT30 (Y) is used, a Top Secret security 
software violation can occur resulting in the following messages: 

TSS7220E 101 J=jobname  A=acid    VOL= ACC=CREATE DSN=dsn
TSS7221E Dataset Not Accessible - dsn

To correct the problem apply CA Allocate APAR LT00664.

As always, please contact Broadcom support for JCLCheck if you have further questions.