Racf ICH408I messages and Sysparm RACFSUPP
Article ID: 277859
Updated On:
Products
Issue/Introduction
When Sysparm RACFSUPP is set to Y , the messages ICH408I are not showed but only DISK messages like the following:
ADSDS010 2173 RACF HAS DENIED READ ACCESS TO VOLUME=vvvvvv, DSNAME=dsname
ADSDS047 2173 BASED ON GENERIC PROFILE ? OR RACF EXIT
how to get also the RACF messages of the above security violation.
Resolution
When the SAMS:Disk security interface is activated (RACFSUPPy), the product performs a pre-check for security and expects to have UPDATE authority to process the datasets or correct auth on VOLUMES. When the security interface is not active (RACFSUPPn) no pre-check is done, and it is left to the system to determine security, causing the Security product violation messages.
Running with RACFSUPPy will avoid the S913 abends and also the Security product violation messages, so Datasets/Volumes for which the user does not have the correct authority will be bypassed.
Below a logic diagram showing how the Sysparm RACFSUPP works:
Feedback
