DIAGNOSE Code X'BC'
Unless a user's SECLABEL dominates that of a spool file, they cannot read it. In fact, if a user tries to open a spool file, using DIAGNOSE X'BC', and the user is not authorized to read the file, then the MAC check fails and the system withholds most information about the spool file. That is, if the user's SECLABEL does not dominate that of the spool file, the system does not fill in all the fields of the user-supplied buffer. The system supplies only the following fields with meaningful data:
USER ID
FILE ID
CLASS
TYPE
STATUS
DATE
TIME
FILE ID
CLASS
TYPE
STATUS
DATE
TIME
The other fields of the buffer are filled in with asterisks.
Note: In this case, the spool file is not opened but the
return code is set to zero.
Application programs may be expecting a return code of zero to indicate that all data is valid and may need to be modified to handle the asterisks.