TSS7251E Access Denied to PROGRAM <FASPF> With Compuware's File-Aid.

Products

• Cleanup
• Datacom
• DATACOM - AD
• CIS
• COMMON SERVICES FOR Z/OS
• 90S SERVICES
• DATABASE MANAGEMENT SOLUTIONS FOR DB2 FOR Z/OS
• COMMON PRODUCT SERVICES COMPONENT
• Common Services
• CA ECOMETER SERVER COMPONENT FOC
• Easytrieve Report Generator for Common Services
• INFOCAI MAINTENANCE
• IPC
• UNICENTER JCLCHECK COMMON COMPONENT
• Mainframe VM Product Manager
• CHORUS SOFTWARE MANAGER
• CA ON DEMAND PORTAL
• CA Service Desk Manager - Unified Self Service
• PAM CLIENT FOR LINUX ON MAINFRAME
• MAINFRAME CONNECTOR FOR LINUX ON MAINFRAME
• GRAPHICAL MANAGEMENT INTERFACE
• WEB ADMINISTRATOR FOR TOP SECRET
• Xpertware
• Top Secret
• Top Secret - LDAP
• Top Secret - VSE

Issue/Introduction

Description:

Compuware's File-Aid product (ISPF application) uses a program called FASPF.

FASPF is not defined as a PROGRAM resource to CA Top Secret.

When some users (not all) try to use File Aid, they receive this message:

TSS7251E Access Denied to PROGRAM <FASPF>
Command 'FASPF' abended with code 806000. Load module not found.

Solution:

The ACIDs getting the TSS7251E messages probably have LCF lists on them.

When a program check is done:

• If it is not defined to CA Top Secret in the PROGRAM resource class, CA Top Secret does an internal LCF check.
  
  
• If there are no LCF lists on the ACID, the LCF check passes.
  
  
• If there are LCF lists on the ACID, the LCF check will fail if the user isn't authorized.

To verify this is the case:

1. For one of the users getting the TSS7251E error
   
   
2. Issue TSS LIST(acid) DATA(LCF,PROFLIE)
   
   
3. And see if there are any LCF rules on the ACID or any of the attached profiles with LCF FAC = TSO.

To allow the user, add FASPF to the authorized command list on the acid via:

TSS ADD(acid) COMMAND(TSO,FASPF)
TSS REFRESH(acid) JOBNAME(*)

to refresh the acid in all address spaces.

Environment

Release:
Component: AWAGNT