ACF2 ACCOUNT lid can change PSWD-VIO of another ACCOUNT lid but not PWP-VIO
search cancel

ACF2 ACCOUNT lid can change PSWD-VIO of another ACCOUNT lid but not PWP-VIO

book

Article ID: 264522

calendar_today

Updated On:

Products

ACF2 ACF2 - MISC ACF2 - z/OS

Issue/Introduction

Why would an ACF2 lid with ACCOUNT be able to clear PSWD-VIO for another ACCOUNT lid, but not PWP-VIO if CASECAUT foresees access for both?

Environment

Release : 16.0

Resolution

This is normal behavior for LID record fields such as PWP-VIO when privileged user to privileged user access is required. CASECAUT access does not come into play for this circumstance.

In order to resolve this issue, make a change to the ACFFDR using UM99901 to add ACCOUNT to the ALTER field of the @CFDE PWP-VIO: 

@CFDE  PWP-VIO,LIDPPVIO,BINARY,ALTER=SECURITY+ACCOUNT,
            LIST=ALL,FLAGS=LIMIT,GROUP=4,ZERO=YES,               
            VRTN2=14,COUNTER=YES                        

Verify the PSWD-VIO field has already had these changes made to it which is why the discrepancy occurs.