Dataset access - rule is in place to allow access yet access denied?

Document ID : KB000013008
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

Dataset access - rule is in place to allow access yet access denied?

Answer:

Issue the command TSS MODI FAC(facility name) check the Attributes to see if 

you have RES or NORES set for DB2DDF. If you have NORES change to RES 

TSS MODI FAC(facname=RES) 

example: 

TSS9552I ATTRIBUTES=NOPROMPT,NOAUDIT,NORES,WARNPW, 

 

Dataset's are a MASKABLE resource. 

RES provides for the interpretation and recognition of maskable resources 

within the facility. Without RES on the facility, security checks against 

these resource classes will fail. 

With the NORES attribute on the facility, the permissions for the maskable 

resources like DATASET are not loaded into the user's security record 

when the user signs on to an address space that is associated with that 

Facility.

 

Additional Information:

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en