(ID 292327) Technical bulletin: An unauthorized user can delete a partially migrated data set
Product | BMC Compuware FDR |
---|---|
Version | 5.04 |
Date | 2023/09/14 00:00 |
We are alerting users to a problem in the listed BMC Compuware FDR product.
Issue
If the first piece of a partially archived multi-volume data set is not migrated, the partially archived multi-volume data set can be deleted without the required ALTER privileges.
However, if the first piece of the archived multi-volume data set is migrated, or if the archived multi-volume data set is completely migrated, or if it is on DASD, the data set cannot be deleted without ALTER authority for the data set.
Resolution
You can resolve the issue by applying the following ZAP:
***** ZAP-ID# : P-54.9052
* DATE : 23.033
* PREREQ : V 5.4/90
* STATUS : NOT APPLIED
* AUTHOR : MKP
* SYMPTOMS : Partially archived multi volume dataset (where the
* first piece is not migrated) is deleted for a user
* with read authority on the dataset profile.
* PROBLEM : LXRECDEL is tested for 'ON' for a YES condition.
* FDROPT sets this to OFF for YES condition.
* SOLUTION : Apply zap.
* LXRECDEL test changed to check 'OFF' for a 'YES'.
*
* NOTE : IN ADDITION TO USING SUPERZAP (AMASPZAP) TO APPLY
* THE ZAP, IF THE LOCATE EXIT IS ACTIVE AND
* DYNAMICALLY INSTALLED, FDRZAP MUST BE RUN IN
* ADDITION TO AMASPZAP TO APPLY THE ZAP TO THE IN
* STORAGE COPY OF FDR026DU. AN EXAMPLE OF THE JCL
* TO USE FDRZAP IS:
*
* //FDRZAP EXEC PGM=FDRZAP
* //STEPLIB DD DISP=SHR,DSN= FDR LIBRARY
* //SYSLIB DD DISP=SHR,DSN= FDR LIBRARY
* //SYSPRINT DD SYSOUT=*
* //SYSIN DD *
* PUT FDR026DU ZAP CARDS HERE
* /*
* MODULE(S) : FDR026DU
*-
*-
NAME FDR026DU FDR026DU FOR V 5.4/88A and Above
IDRDATA P548903
VER 059E 4710,65B0
REP 059E 47E0,65B0
CHECKSUM B32EB25E
* DATE : 23.033
* PREREQ : V 5.4/90
* STATUS : NOT APPLIED
* AUTHOR : MKP
* SYMPTOMS : Partially archived multi volume dataset (where the
* first piece is not migrated) is deleted for a user
* with read authority on the dataset profile.
* PROBLEM : LXRECDEL is tested for 'ON' for a YES condition.
* FDROPT sets this to OFF for YES condition.
* SOLUTION : Apply zap.
* LXRECDEL test changed to check 'OFF' for a 'YES'.
*
* NOTE : IN ADDITION TO USING SUPERZAP (AMASPZAP) TO APPLY
* THE ZAP, IF THE LOCATE EXIT IS ACTIVE AND
* DYNAMICALLY INSTALLED, FDRZAP MUST BE RUN IN
* ADDITION TO AMASPZAP TO APPLY THE ZAP TO THE IN
* STORAGE COPY OF FDR026DU. AN EXAMPLE OF THE JCL
* TO USE FDRZAP IS:
*
* //FDRZAP EXEC PGM=FDRZAP
* //STEPLIB DD DISP=SHR,DSN= FDR LIBRARY
* //SYSLIB DD DISP=SHR,DSN= FDR LIBRARY
* //SYSPRINT DD SYSOUT=*
* //SYSIN DD *
* PUT FDR026DU ZAP CARDS HERE
* /*
* MODULE(S) : FDR026DU
*-
*-
NAME FDR026DU FDR026DU FOR V 5.4/88A and Above
IDRDATA P548903
VER 059E 4710,65B0
REP 059E 47E0,65B0
CHECKSUM B32EB25E
If you have questions, please create a Support case atSupport Central.
Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*