(ID 292327) Technical bulletin: An unauthorized user can delete a partially migrated data set


Product 

BMC Compuware FDR 

Version

5.04

Date

2023/09/14 00:00 

We are alerting users to a problem in the listed BMC Compuware FDR product.

Issue

If the first piece of a partially archived multi-volume data set is not migrated, the partially archived multi-volume data set can be deleted without the required ALTER privileges.

However, if the first piece of the archived multi-volume data set is migrated, or if the archived multi-volume data set is completely migrated, or if it is on DASD, the data set cannot be deleted without ALTER authority for the data set.

Resolution

You can resolve the issue by applying the following ZAP:

*****    ZAP-ID#   : P-54.9052                                          
*        DATE      : 23.033                                             
*        PREREQ    : V 5.4/90                                           
*        STATUS    : NOT APPLIED                                        
*        AUTHOR    : MKP                                                
*        SYMPTOMS  : Partially archived multi volume dataset (where the
*                    first piece is not migrated) is deleted for a user
*                    with read authority on the dataset profile.        
*        PROBLEM   : LXRECDEL is tested for 'ON' for  a YES condition.  
*                    FDROPT sets this to OFF for YES condition.         
*        SOLUTION  : Apply zap.                                         
*                    LXRECDEL test changed to check 'OFF' for a 'YES'.  
*                                                                       
*        NOTE      : IN ADDITION TO USING SUPERZAP (AMASPZAP) TO APPLY  
*                    THE ZAP, IF THE LOCATE EXIT IS ACTIVE AND          
*                    DYNAMICALLY INSTALLED, FDRZAP MUST BE RUN IN       
*                    ADDITION TO AMASPZAP TO APPLY THE ZAP TO THE IN    
*                    STORAGE COPY OF FDR026DU.  AN EXAMPLE OF THE JCL   
*                    TO USE FDRZAP IS:                                  
*                                                                       
*                    //FDRZAP  EXEC PGM=FDRZAP                          
*                    //STEPLIB  DD  DISP=SHR,DSN=  FDR LIBRARY          
*                    //SYSLIB   DD  DISP=SHR,DSN=  FDR LIBRARY          
*                    //SYSPRINT DD  SYSOUT=*                            
*                    //SYSIN    DD  *                                   
*                      PUT FDR026DU ZAP CARDS HERE                      
*                    /*                                                 
*        MODULE(S) : FDR026DU                                  
*-                                                                      
*-                                                                      
 NAME   FDR026DU  FDR026DU         FOR V 5.4/88A  and Above             
   IDRDATA P548903                                                      
    VER 059E 4710,65B0                                                  
    REP 059E 47E0,65B0                                                  
    CHECKSUM B32EB25E
Success

Best practice
We recommend that you set a watch on this page to make sure that you receive email notification of any updates. We will update this notice only in the documentation portal.

To set a watch on this page, follow these steps: 

  1. In the upper right toolbar, click Watch:
    watch.png
  2. Click Watch this Page.
  3. Email alerts are sent from docs-noreply@bmc.com, so make sure that @bmc.com is in your mail system's safe list to prevent email alerts from being lost in your spam folder.

If you have questions, please create a Support case atSupport Central.

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*

BMC Compuware FDR 5.04