ACF00112 SUPER SECURITY PRIVILEGES NEEDED TO CHANGE FIELD AUDIT

Products

• ACF2

Issue/Introduction

Getting ACF00112 SUPER SECURITY PRIVILEGES NEEDED TO CHANGE FIELD AUDIT when a scoped logonid issues a change command. 

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

ACF00112 SUPER SECURITY PRIVILEGES NEEDED TO CHANGE FIELD AUDIT and SECURITY is due to the reason that these fields are marked with RESTRICT flag in the CFDE entry shown below as an example and only an unrestricted security administrator is authorized to modify this field.

@CFDE  AUDIT,LIDTFLAG,BIT,ALTER=SECURITY,               
              LIST=SECURITY+ACCOUNT+AUDIT,                
              FLAGS=RESTRICT,BITMAP=LIDTAUD,GROUP=2, 
              ZERO=YES       

@CFDE  SECURITY,LIDTFLAG,BIT,ALTER=SECURITY,            
            LIST=SECURITY+ACCOUNT+AUDIT,                
            FLAGS=RESTRICT,BITMAP=LIDTSEC,GROUP=2, 
            ZERO=YES 

Can you please browse your ACFFDR and confirm this? 

The workaround includes two options:

1. The logonid doing the change needs to be 'unscoped' SECURITY
2. Remove FLAGS=RESTRICT for AUDIT and SECURITY from the @CFDE entry, but this would require an ACFFDR change and NEWMOD of the ACFFDR