ICH408I Errors trying to use the opsrexx endpoint of the OPS REST API

Products

• OPS/MVS Event Management & Automation

Issue/Introduction

When attempting to execute a REXX program via the OPSREST API using the /api/v1/opsrexx?sub=OPSS endpoint, several RACF errors are generated.

ICH408I USER(xxxxxx) GROUP(gggggg) NAME(nnnnnnnnnn)
   /ppp/ggg/opsrest/opsrest/data/aaaaaaaaaaaaaaaaaaaaaaaaaa.stdout
   CL(FSSEC) FID(xxxxxxxxxxxxxxxxxxxxxxxxxx)
   INSUFFICIENT AUTHORITY TO CHMOD
   ACCESS INTENT(-W-) ACCESS ALLOWED(GROUP      R--)
   EFFECTIVE UID(nnnnnnnnn) EFFECTIVE GID(nnnnnnnnnn)

ICH408I USER(xxxxxx) GROUP(gggggg) NAME(nnnnnnnnnn)
   /ppp/ggg/opsrest/opsrest/data/aaaaaaaaaaaaaaaaaaaaaaaaaa.stdout
   CL(FSOBJ) FID(xxxxxxxxxxxxxxxxxxxxxxxxxx)
   INSUFFICIENT AUTHORITY TO OPEN
   ACCESS INTENT(-W-) ACCESS ALLOWED(GROUP      R--)
   EFFECTIVE UID(nnnnnnnnn) EFFECTIVE GID(nnnnnnnnnn)

 

Environment

OPS/MVS

Cause

The CHMOD command cannot be executed because the OPSREST userid lacks the required permissions.

 

Resolution

Ensure that the OPSREST started task userid has been granted the necessary permissions to modify Unix file attributes.

Sample RACF commands:

PERMIT SUPERUSER.FILESYS.CHANGEPERMS CLASS(UNIXPRIV) ID(opsrestuser) ACCESS(READ)
SETROPTS RACLIST(UNIXPRIV) REFRESH