Getting message C1E0107I " RESTRICTED FROM FUNC" but action still happens

Products

• Endevor

Issue/Introduction

Some users experience these messages while working in Endevor:

C1E0107I  USER <userid> RESTRICTED FROM FUNC GENERATE RESOURCE <prefix>.<level1>.<level2>.BASE.GENERATE.<type>    
C1E0107I  USER <userid> RESTRICTED FROM FUNC GENERATE RESOURCE <prefix>.GENERATE                        
C1G0265I  PROCESSOR GROUP <group> FOR THIS ELEMENT WAS OBTAINED FROM PRIMARY ELEMENT RECORD      
C1G0143I  BEGINNING EXECUTION OF GENERATE PROCESSOR <processor> OF GROUP <group>. 

This does not stop them from working in Endevor, they can still generate and perform functions.    This only happens to some users.

 

Environment

Release : all

Cause

Based on the error messages the user does not have access to perform that action. 

Resolution

To determine why, you need to add the following DD statements and perform the action in batch: 

//BSTERR DD SYSOUT=* 
//EN$TRESI DD SYSOUT=* 
//EN$TROPT DD SYSOUT=* 

The users may actually be restricted from doing the action.  In other words the ESI rule should fail but did not.

In the EN$TRESI (ESI trace) you may see this:

ENCS101I User <userid>  access is allowed  from SAF  in WARN mode     

This would indicate BC1TNEQU table has WARN=YES.  

For example:

BC1TNEQU ESIDFLTS WARN=YES,                                             X 
               TITLE='BC1TNEQU ESI TABLE',                                     X 
               HEADER=YES,                                                                X 
               DESC=6,                                                                          X 
               ROUTCDE=11    

Change  all occurances of WARN=YES  to WARN=NO. Then recompile and link the table.