TSS7234E Fetch Violation

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

The user has a permit for FETCH but receives a FETCH violation with the requested access of READ.

The following are examples of the error messages received:

TSS7220E 108 J=jobname A=acid VOL=volume ACC=READ DSN=SYS1.TCPIP.GSEZBAIN
TSS7234E Fetch Violation
TSS7230E DSN: SYS1.TCPIP.GSEZBAIN

 

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

Prior to 12.0 a permission for FETCH allowed both READ and FETCH access.
This is not the way that FETCH should work and was corrected.
A permit for Fetch access now only allows FETCH access and in order to have READ access, an explicit permit for READ is necessary.