IBM Support

OA50285: REVOKED CONNECTS NOT PROPERLY SIMULATED IN TYPE=ACCESS.

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • RACF ignores revoked connects unless it is a DATASET CREATE
    action for a data set starting with HLQ=group. Connect-Revoke
    status was not used everywhere, too much allowed by HLQ group
    operations.
    

Local fix

  • n/a
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of the zSecure Access Monitor          *
    *                 reporting facility exploiting the resource   *
    *                 access simulation function.                  *
    ****************************************************************
    * PROBLEM DESCRIPTION: The zSecure Access Monitor reporting    *
    *                      function does not handle the revoked    *
    *                      group connects properly while resource  *
    *                      access simulation is requested.         *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When the resource access simulation function is used by the
    zSecure Access Monitor reporting function, the revoked status of
    group connects is not taken into account resulting in an
    incorrect access level reported.
    

Problem conclusion

  • The zSecure Access Monitor reporting engine has been modified so
    that the revoked status of group connects is simulated properly.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA50285

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    211

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2016-04-11

  • Closed date

    2016-06-09

  • Last modified date

    2016-07-04

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UA81923 UA81924

Modules/Macros

  •    CKROUACC
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R211 PSY UA81923

       UP16/06/10 P F606

  • R220 PSY UA81924

       UP16/06/10 P F606

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"}, "Product":{"code":"SSCE68R","label":"zSecure Admin"},"Component":"","ARM Category":[],"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"211","Edition":""}]

Document Information

Modified date:
04 July 2016