I am trying to execeute an IMS command that is controlled by the ACF2/IMS interface. I get messages ACFDC040 and ACF04056 Which state that I am getting a violation - but I am allowed to issue the command successfully.

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

Logonid able to issue a /ASSIGN TRAN command despite not having authority: 
ACFDC040 LOGONID xxxxxx SOURCE xxxxxxx ACCESS TO COMMAND ASSIGN 
ACF04056 ACCESS TO RESOURCE ASSIGN TYPE Rxxx BY xxxxxx NOT AUTHORIZED 
/ASS TRAN xxxxxx CLASS 2 
DFS058I  ASSIGN COMMAND COMPLETED 

Rules that govern the IMS Commands for ASSIGN were verified and logonid does not have authority to issue this command.

 

 

 

Environment

Release:
Component: ACF2MS

Resolution

ACF2/IMS uses the DFSCCMD0 exit point in IMS.
Ff there is another version of DFSCCMD0 in the IMS RESLIB - ACF2 will pass control to that module if CMDMCS is set to either B or C.
The default IMS version of this module will allow access.
If you rename the module in the IMS reslib - the outcome of the ACF2 validation will be honored.