OA46228: CKGRACF ACCESS DOES NOT TAKE DEFAULT RETURN CODE INTO ACCOUNT

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• When using CKGRACF ACCESS to test access to profiles, the
  default return code of the CLASS is not taken into account in
  the output.
  For example if the default return code of the class is 8,
  CKGRACF ACCESS <userid> <class> <undefined profile name>
  reports:
  CKG586I 00 <class> <undefined profile name> protection
  undecided by SAF, application decides
  

Local fix

• n/a
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: All users of the zSecure CKGRACF component.  *
  ****************************************************************
  * PROBLEM DESCRIPTION: The CKGRACF component of zSecure Suite  *
  *                      issues MSGCKG586I while processing      *
  *                      ACCESS command.                         *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  When the CKGRACF component of zSecure Suite is processing the
  ACCESS command, MSGCKG586I "PROTECTION UNDECIDED BY SAF" might
  be issued if the resource does not have a matching profile,
  even if the class has been defined with a DEFAULTRC of 0 or 8.
  

Problem conclusion

• The CKGRACF component of zSecure Suite has been modified to
  use the DEFAULTRC to issue a message stating the appropriate
  effective access level of the user. Message CKG586I will only
  be issued for classes with a DEFAULTRC of 4.
  1D0Y
  1D1Y
  210Y
  211Y
  CKGRCRT
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UA75449 UA75450 UA75451 UA75452

Modules/Macros

•    CKGRCRT
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R1D0 PSY UA75449

     UP14/11/11 P F411

• R1D1 PSY UA75450

     UP14/11/11 P F411

• R210 PSY UA75451

     UP14/11/11 P F411

• R211 PSY UA75452

     UP14/11/11 P F411

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.