Security Read Access requirements for Autoproc with JCLCheck Workload Automation
Article ID: 51704
Updated On:
Products
Issue/Introduction
When the JCLCheck WA "AUTOPROC" feature is enabled, a security call is made for each PROCLIB returned by JES. If READ access of a proclib fails, JCLCheck issues message "CAY6488W PROCLIB "data set name" NOT DEFINED. READ ACCESS DENIED BY SECURITY", and the proclib is omitted from allocation.
Environment
Release: 12.0
Component: JCLCheck Workload Automation
Resolution
JCLCheck runs under the ID of the user who submits the JCLCheck job, or who invokes JCLCheck (in ISPF). This ID must be given READ access authority to all input sources, including procedure libraries that are defined to the JES startup.
If READ access to the proclibs is not feasible, and you do not want to see message CAY6488 issued, you may suppress it by applying usermod MZ2C023 from the JCLCheck hlq.CAZ2CJCL data set.
Also, to prevent the security message issued by the security application (ACF2, Top Secret, or RACF), use the following JCLCheck runtime option: SECURITY(NOPROG, NODASD, NOSTOR, NOMGMT, NOLOG). If the SECURITY option is already enabled, simply add "NOLOG" to the list of sub-options.
Additional Information
Feedback
