IEE345I MODIFY AUTHORITY INVALID, FAILED BY MVS

[Marc Ost]

Hello,

I keep getting the above message when I give a modify command from within a
rexx that
activates an MCS console session. Display commands work fine.
Is this a RACF issue ? I wonder what else I need to do
to be able to execute this command?
Is there some way to say what the command-authority level is for such a
console application ?

I adjusted the IKJTSOxx-member to include CONSOLE and CONSPROF as auth
TSO-commands.
I was granted access to the CONSOLE resource in the TSOAUTH RACF-class.
So I think that everything is done what concerns TSO.

Any help is appreciated,
T.I.A.

Marc

[Patrick Leroy]

I think you have to be authorized via the OPERPARM userid segment. Without
it you only can do DISPLAYs. Something like:
ALU userid OPERPARM(AUTH(MASTER)) ... In this case the MASTER gives you
total authority. There are other options.
Hope this helps.

Patrick Leroy
Mello-Império Serviços Partilhados, ACE

[Marc Ost]

Patrick,

SETROPTS RACLIST(OPERCMDS) solved my problem.
The OPERCMDS class needs to be RACLIST-ed. (RACLREQ=YES for this class)
This was not done overhere, the class was only activated.
So granting the user access to any of the resources from the OPERCMDS class
had no effect at all
until the class was raclisted.
FYI, the user has no OPERPARM segement, this does not seem to be necessary.

Thanks anyway,

Marc

-----Original Message-----
From: Patrick Leroy [mailto:patric...@MELLO-IMPERIO.PT]
Sent: Thursday, November 04, 1999 2:44 PM
To: TSO-...@VM.MARIST.EDU
Subject: Re: IEE345I MODIFY AUTHORITY INVALID, FAILED BY MVS

I think you have to be authorized via the OPERPARM userid segment. Without
it you only can do DISPLAYs. Something like:
ALU userid OPERPARM(AUTH(MASTER)) ... In this case the MASTER gives you
total authority. There are other options.
Hope this helps.

Patrick Leroy
Mello-Imperio Servicos Partilhados, ACE

[Thompson Mark-ayvx90]

Marc:

We are an ACF2 shop and needed to set up a user profile with an "operparm"
segment in order to give MASTER authority to some userids. I think the
default might be INFO, which could account for not being able to issue
MODIFY commands. Not sure what the RACF equivalents are but think this is
documented in TSO/E Customization. Hope this helps.

Regards,
Mark Thompson
Motorola

[Patrick Leroy]

Ok Mark. Maybe it's because of the type of cmd you execute. I vaguely
remember that situation where (without OPERPARM AUTH(MASTER)) I could do
some comands and others no (JES2 cmds...) OPERPARM solved this.
Thanks.

Patrick Leroy - 21 7204315
Mello-Império Serviços Partilhados, ACE
[http://www.terravista.pt/copacabana/2001]
__________________________________________________________
PARA-CHOQUES de Caminhão: A cal é virgem porque só lida com brocha.

> -----Original Message-----
> From: Marc Ost [mailto:Marc...@MERANT.COM]