Ok, this oughta be a simple one but I haven't been able to find it in the manual. I'm cleaning up some old permissions and see things like this:
DATASET = XXX. OWNER(OWNDEPT )
XAUTH = XXX. ACID(SYSPROGP)
ACCESS = ALL
PRIVPGM = GIM (G)
XAUTH = XXX. ACID(SYSPROGP)
ACCESS = ALL
I want to revoke the PRIVPGM permission and leave the plain one. But what syntax would I use? All the combinations I've tried result in complaints of bad syntax, with one exception: When I say "rev(sysprogp) dsn(xxx.) privpgm", that revokes
both of them (and even that may not be what the TSS coders really wanted to happen).