IBM Support

OA68453: DELETING A GLOBAL PROFILE RESULTS IN SETR GLOBAL(CLASS) REFRESH BUT SHOULD BE SETR NOGLOBAL(CLASS)

A fix is available

Subscribe

You can track all active APARs for this component.

 

APAR status

  • Closed as program error.

Error description

  • Deleting a GLOBAL profile results in SETR GLOBAL(class) REFRESH
    but should be SETR NOGLOBAL(class).
    
    zSecure generates an incorrect SETROPTS command after RDELETE
    GLOBAL class.
    SETROPTS GLOBAL(class) REFRESH is issued, but the correct RACF
    command is SETROPTS NOGLOBAL(class).
    

Local fix

  • Manually issue SETROPTS NOGLOBAL(class) after the RDELETE GLOBAL
    class command.
    

Problem summary

  • ****************************************************************
    * USERS AFFECTED: Users of zSecure Admin managing profiles in  *
    *                 the GLOBAL class.                            *
    ****************************************************************
    * PROBLEM DESCRIPTION: zSecure Admin generates an incorrect    *
    *                      RACF command when a profile in the      *
    *                      GLOBAL class is deleted.                *
    ****************************************************************
    * RECOMMENDATION: Apply the PTF provided.                      *
    ****************************************************************
    When a profile in the GLOBAL class is deleted, the zSecure Admin
    generates a 'SETROPTS GLOBAL(<class>) REFRESH' RACF command
    whereas it should be a 'SETROPTS NOGLOBAL(<class>)'.
    

Problem conclusion

  • zSecure Admin has been modified, so that it generates a proper
    RACF command ('SETROPTS NOGLOBAL(<class>)') when a profile in
    the GLOBAL class is deleted.
    

Temporary fix

Comments

APAR Information

  • APAR number

    OA68453

  • Reported component name

    ZSEC BASE,ADMIN

  • Reported component ID

    5655T0100

  • Reported release

    310

  • Status

    CLOSED PER

  • PE

    NoPE

  • HIPER

    NoHIPER

  • Special Attention

    NoSpecatt / Xsystem

  • Submitted date

    2025-09-03

  • Closed date

    2025-12-08

  • Last modified date

    2026-01-02

  • APAR is sysrouted FROM one or more of the following:

  • APAR is sysrouted TO one or more of the following:

    UJ98678 UJ98679 UJ98680

Modules/Macros

  • CKRACT   CKRACTS  CKREFRI  CKREFRQ  GKRACT   GKRACTS  GKREFRI
    GKREFRQ
    

Fix information

  • Fixed component name

    ZSEC BASE,ADMIN

  • Fixed component ID

    5655T0100

Applicable component levels

  • R250 PSY UJ98680

       UP25/12/10 P F512

  • R310 PSY UJ98679

       UP25/12/10 P F512

  • R320 PSY UJ98678

       UP25/12/10 P F512

Fix is available

  • Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.

[{"Business Unit":{"code":"BU048","label":"IBM Software"},"Product":{"code":"SSPQTM","label":"IBM Security zSecure Admin"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"310","Line of Business":{"code":"LOB70","label":"Z TPS"}}]

Document Information

Modified date:
02 January 2026