Troubleshooting › Common Troubleshooting Procedures › Data Set or Volume Access Incorrectly Denied

Data Set or Volume Access Incorrectly Denied

Symptom:

Users cannot access a resource.

Solution:

Do the following:

• Determine the user's and the facility's mode:

  TSS LIST(acid) DATA(XAUTH,PROFILE)
  

  TSS LIST(ALL) DATA(XAUTH)
  

  TSS MODIFY(FACILITY(fac)) 
  

  If the user has a more restrictive mode than the facility, permit the user to a less restrictive mode or permit explicit access to the resource.

• Determine if the DEFPROT attribute is attached to the data set:

  TSS LIST(RDT) RESCLASS(DATASET) 
  

  Is the DEFPROT attribute is attached to the data set, permit the user explicit access to the resource.

• Access TSSSIM to simulate a data set access attempts by entering the TSSSIM parameters:
  • ACID—User's ACID
  • FACILITY—Facility user had access to when the problem occurred
  • MODE—The facility's mode
  • TRACE—Yes
  • ACCESS—The access that the user requested when access was denied
• List the user's profiles and user Security Record:

  TSS LIST(acid) DATA(ALL,PROFILE)
  

  TSS LIST(ALL) DATA(ALL)
  

  Examine ownership and XAUTH fields and the security records of any connected profiles. Data set access problems might be caused by volume access rules.

  If the display does not show authorizations at the requested access level and to the resource permit the user access to the resource through the user record, ALL Record, or through connection to a profile which has the appropriate access.

• Check the settings of the AUTH control option:

  TSS MODIFY(STATUS) 
  

  If AUTH been changed after the Security File was originally established attempt to reconstruct Security File to match the required access definitions.