CAY6488W error message resolution

[Brad Pepper]

The Resolution states "CA JCLCheck Workload Automation(WA) must be given read-access authority to all input sources, including procedure libraries that are defined to the JES startup."

 

Is there a RACF ID associated with CA JCLCheck WA that I can add to the dataset profile for the new proclib in JES that is creating this error?

or

Also, to prevent the security message issued by the security application (ACF2, Top Secret, or RACF), use the following JCLCheck runtime option: SECURITY(NOPROG, NODASD, NOSTOR, NOMGMT, NOLOG). If the SECURITY option is already enabled, simply add "NOLOG" to the list of sub-options.

Where do you specify the NOLOG option?

 

[Quynh Pham]

Hello Brad,

JCLCheck runs under the ID of the user who submits the JCLCheck job.  For example, user SMITH submits the JCLCheck job, then  RACF ID 'SMITH' needs to have READ access to all the JES proclibs, as well as input sources (i.e., STEPLIB, control statements libraries).

NOLOG is specified with the SECURITY runtime option.  JCLCheck runtime options are found here:
  1.  in the JCLCheck batch job
  2. in the EDCHKDD DD control member for EDCHEK use
  3. in JCLCheck ISPF panelid JCK0204 (Option 0 for Option Specification, then 3 for Security Options)

JCLCheck Runtime Options are documented here:
https://techdocs.broadcom.com/us/en/ca-mainframe-software/automation/ca-jclcheck-workload-automation/12-0/reference/jclcheck-runtime-options.html

If you have any problem looking for runtime options, or using the Security feature, please open a Support case and we'll address it for you.

Thank you.
[e-mail]

[Brad Pepper]

Kiki,

Thanks for your response. Which of the following options is used to specify NOLOG?
[cid:image001.png@01D8A356.1328B720]

Brad Pepper
Phone: [phone]
E-mail: [e-mail]<mailto:[e-mail]>
www.kyndryl.com
[cid:image002.jpg@01D8A356.1328B720]

[Quynh Pham]

Hello Brad,
I don't see any image in your last response.
The SECURITY option is documented here:
https://techdocs.broadcom.com/us/en/ca-mainframe-software/automation/ca-jclcheck-workload-automation/12-0/reference/jclcheck-runtime-options/description-of-runtime-options/security.html

So if you take all defaults, and only need to set NOLOG, then the syntax is SECURITY(NOLOG).  It can also be abbreviated: SEC(NOLOG) 

Thanks.
[e-mail]

[Brad Pepper]

Here’s another try at including the image. Which of the following options is used to specify NOLOG in the ISPF interface?

[cid:image001.png@01D8A35E.4E1EE310]

Brad Pepper
Phone: [phone]
E-mail: [e-mail]<mailto:[e-mail]>
www.kyndryl.com
[cid:image002.jpg@01D8A35E.4E1EE310]

[Quynh Pham]

Hello Brad,
Still no image.  This is seen on your response: [cid:image002.jpg@01D8A35E.4E1EE310]

Since you mentioned the ISPF interface, I presumed you meant the SECURITY OPTIONS panel (panel id JCK0204). 
If true, then the NOLOG option cannot be set here.   Please open a support case and I will get this panel updated so NOLOG can be set to Y or N there.  

Thanks.
[e-mail]

[Joseph Walther]

When JCLCHeck is run under Endevor, it can be the Endeor "Alternate id" that submits the JCLCheck job