DDUTILTY - Auth Relationship Reporting

Document ID : KB000097228
Last Modified Date : 26/06/2018
Show Technical Document Details
Introduction:
New customer investigating security reports.
Customer is looking to get some report similar to DDOL panel T43U
Question:
When executing the security report with the DDUTILTY program using the following code from the manual
-RPT START,PERSON,ALL(PROD),SECURITY
-RPT INDEN,PERSON
-RPT RELAT,AUTHORIZATION(,****),TABLE,SYSTEM FORMAT
ERROR: DDFBWT0004 INVALID OVERRIDE
I get the following error when "(,****)" is used. When "(,****)" is removed from the -RPT RELAT statement, the report is generated. I can not find any specific explanation in the 15.0 documents related to "(,****)". Where is this information documented? When I try to substitute other values for TABL or SYSTEM on the -RPT RELAT statement I get errors. When can I find what other values can be used?
Environment:
z/os, CA Datacom/DB 14.0 and higher.
Answer:
// the following DDUTILTY is the closest  one from DDOL T43U panel.  
//SYSIN DD *
-USR DATACOM-INSTALL,NEWUSER 
-DEF PATH,SECURITY                                  
-DEF TRACE,PERSON.AUTHORIZATION,PER-ATZ-AUTH        
-END                                                
-RPT START,PERSON,*(PROD),SECURITY                  
-RPT INDEN,PERSON                                   
-RPT RELAT,AUTHORIZATION(PROD,PRIV),TABLE,SYSTEM    
-END                                                
/*                                                  
//

Note: You can replace '*' by a specific userid.
Note: +USR is also acceptable
The report will however display all the table versions (old, PROD and HIST) adding lines in the report.                                                 
Additional Information:
Original error:
ERROR: DDFBWT0004 INVALID OVERRIDE
was due to using '****' instead of PRIV in the SYSIN.