IOFTech    Problems      Release8A  Newsletters    Doc    FAQ    Q&A    Contacts    Home    Webmaster

IOF Problem Resolution
Problem C09
Previous Next
Description Release 8 IOF Option Menu does not display some options
 
BACKGROUND Release 8 introduced dynamic IOF Option Menus.      Each user sees only the commands they are permitted to use.

In some cases, due to the way the authorization checks are done, a new  user to Release 8 may not see an option that previously appeared on their Option Menu.  Users are only shown options on the dynamic option menu they are authorized to use.

SOLUTION The easiest way to restore a missing command is to grant the user access to the IOF resource that allows the command to be displayed on the Option Menu.  Access can be granted by ALLOW macros in the B23ALLOW option, or by IBM defined SAF rules when IBMSAF=YES is specified in the A60ACF option. The table below shows the ALLOW macros and IBM SAF profiles that are checked. 

 Alternately, the MENUADD command as described in solution 2 below can be used to restore missing commands.

If IBMSAF=YES is specified in options member A60ACF, the IBM defined SAF profile is  checked first. If the answer from SAF is ambivalent (or IBMSAF=NO is specified), then the ALLOW macro(s) are checked.

For example, when IBMSAF=NO is specified, the table below shows that members of the SYSPROG group will see the APPC, CMDS, ENC, MAS, PS, and RM commands on the Option Menu if the following ALLOW macro is present:

       ALLOW  1,0,SYSTEMS,*,GROUP=SYSPROG

When an option is not displayed on the IOF Option Menu, specifying that option results in a COMMAND error.

Option Description Allow macro SDSF Class SAF
Resource Name
APPC APPC transactions ALLOW 1,0,SYSTEMS.SYSID.* ISFCMD.ODSP.MAS.jesx
CMDS Commands ALLOW 1,0,SYSTEMS.SYSID.* ISFCMD.ODSP.MAS.jesx
CN MCS  Console ALLOW 4,4,COMMANDS,CMDNAME.* ISFCMD.ODSP.ULOG.jesx
DEV Device Option Menu ALLOW 1,0,DEVICES,DEVNAME,*
ALLOW 1,0,DEVICES,DEVCOMBO,*
ISFCMD.ODSP.PRINTER.jesx
ENC Enclaves Display ALLOW 1,0,ENCLAVES,*
ALLOW 1,0,SYSTEMS.SYSID.*
ISFCMD.ODSP.ENCLAVE.*
M System Monitor Available by default unless "MONITOR=NONE" is coded on the GROUP macro in B23ALLOW ISFCMD.DSP.ACTIVE.jesx
G Non-held Output Groups These options are displayed by default unless explicitly restricted.  No ALLOW macro checks are made. ISFCMD.DSP.OUTPUT.jesx
H Held Output Groups ISFCMD.DSP.OUTPUT.jesx
I Input Jobs ISFCMD.DSP.INPUT.jesx
O Output Jobs ISFCMD.DSP.STATUS.jesx
R Running Jobs ISFCMD.DSP.STATUS.jesx
INIT Initiator display ALLOW 1,0,DEVICES,DEVNAME,*
ALLOW 1,0,DEVICES,DEVCOMBO,INI.*
ISFCMD.ODSP.INITIATOR.jesx
LOG SYSLOG or
OPERLOG
ALLOW 3,0,JOBS,JOBNAME,SYSLOG
ALLOW 3,0,JOBS,OWNER,'+MASTER+'
ALLOW 3,0,JOBS,JOBCOMBO,+MASTER+.SYSLOG
ALLOW 1,0,SYSTEMS,SYSID,OLOG
ISFCMD.ODSP.ULOG.jesx
MAS MAS Panel ALLOW 1,0,SYSTEMS,SYSID,* ISFCMD.ODSP.MAS.jesx
LINE Display Lines ALLOW 1,0,DEVICES,DEVNAME,*
ALLOW 1,0,DEVICES,DEVCOMBO,LNE.*
ISFCMD.ODSP.LINE.jesx
PR Display Printers ALLOW 1,0,DEVICES,DEVNAME,*
ALLOW 1,0,DEVICES,DEVCOMBO,+PR.*
ISFCMD.ODSP.PRINTER.jesx
PU Display Punches ALLOW 1,0,DEVICES,DEVNAME,*
ALLOW 1,0,DEVICES,DEVCOMBO,+PU.*
ISFCMD.ODSP.PUNCH.jesx
RDR Display Readers ALLOW 1,0,DEVICES,DEVNAME,*
ALLOW 1,0,DEVICES,DEVCOMBO,+RD.*
ISFCMD.ODSP.READER.jesx
SO Display Offloaders ALLOW 1,0,DEVICES,DEVNAME,*
ALLOW 1,0,DEVICES,DEVCOMBO,OXX.*
ISFCMD.ODSP.SO.jesx
PS Processes Display ALLOW 1,0,PROCESS,*
ALLOW 1,0,SYSTEMS,SYSID,*
ISFCMD.ODSP.PROCESS
RM JES2 Monitor ALLOW 1,0,SYSTEMS.SYSID.*
ALLOW 4,0,COMMANDS,CMDNAME,*
ALLOW 4,0,COMMANDS,CMDCOMBO,*.*
ISFCMD.ODSP.RM.jesx
The commands below are added in Release 8B
MORE Display More Commands Always displayed unless restricted with AUTHREM none
CK Display Health Checks ALLOW 1,0,CHECKS.HCCOMBO.*.*
ALLOW 1,0,SYSTEMS,SYSID,*
 
ISFCMD.ODSP.HCHECKER.sysname  
WLM S Display Scheduling Environments ALLOW 1,0,SCHENV,NAM1,*
ALLOW 1,0,SYSTEMS.SYSID.*
 
ISFCMD.DSP.SCHENV.sysname
WLM R Display Scheduling Resources ALLOW 1,0,SCHRES,NAM1,*
ALLOW 1,0,SYSTEMS.SYSID.*
 
ISFCMD.ODSP.RESOURCE.sysname
The commands below are added in Release 8C
JBC Display Job Classes ALLOW 1,0,JOBCLASS,CLASS,*
ALLOW 1,0,SYSTEMS,SYSID,*

 
ISFCMD.ODSP.JOBCLASS.jesx
SPV Display Spool Volumes ALLOW 1,0,VOLUMES,VOLUME,*
ALLOW 1,0,SYSTEMS,SYSID,*

 
ISFCMD.ODSP.SPOOL.jesx
NODE Display NJE Nodes ALLOW 1,0,NODES,NAME,*
ALLOW 1,0,SYSTEMS,SYSID,*

 
ISFCMD.ODSP.NODE.jesx

Note that CHK is an alias for CK and NOD is an alias for NODE.  Current releases omitted the CHK and NOD aliases from AUTH, AUTHADD and AUTHREM commands.

SAF checks specified in the B24ACFDF option can be used to cause options to be displayed on the user's menu.  Assume for example the following is specified in B24ACFDF:

       ACFDEF  IOFACF,              IOF Resource prefix                *
               CLASS=DATASET,       Resource class for IOF resources   *
               JOBS=COMBO,          Chk jobs by owner and jobname      *
               GROUPS=NONE,         No ACF output group control        *
               DEVICES=COMBO,       Chk devices by type and name       *
               CMDS=YES,            Chk commands by type, cmd, parm    *
               ENCLAVES=YES,        Chk enclaves                       *
               PROCESS=YES,         Chk process                        *
               SYSTEMS=YES,         Chk systems functions              *
               CHECKS=YES,       8B Chk Health Checker                 *
               SCHENV=YES,       8B Chk Scheduling environmen          *
               SCHRES=YES,       8B Chk WLM resources                  *
               JOBCLASS=YES,     8C Chk Job Classes by class           *
               VOLUMES=YES,      8C Chk Spool Volumes by volume name   *
               NODES=YES,        8C Chk Nodes by node name             *
               USERJOB=NO           Users can't permit to other users   

The LOG option will be displayed on the Option Menu if a user has  access to either of the profiles shown including any generic form.

Profile Level   RACF access
IOFACF.STA.D.SYSTEMS.* 1 Read
IOFACF.STA.D.JOBS.COMB.+MASTER+.SYSLOG 3 Control

Note that fixes U8A2190, U8A2206 and U8A2214 are required in order for all the allow macros and SAF resources defined below to be honored.

When the B23ALLOW option is changed, you must run the M18NEWOP job and refresh LLA in order to apply the changes.

See solution 2 below for alternate ways to override the default options displayed.


 

SOLUTION The GROUP macro in the B23ALLOW member of the IOF OPTIONS data set has  parameters  for overriding the options that each IOF group of users sees on the IOF Option Menu.  Note however that if IBMSAF=YES is specified in the A60ACF option and the SDSF class is enabled, then SAF profiles will override the AUTH parameters shown below.

AUTHADD=(I,R,...) specifies options that should be added to the default options for the group.

AUTHREM=(I,R,...) specifies options that shoule be removed from the default options for the group.

AUTH=(I,R,...) specifies the exact options that should be displayed for the group of users.

These macros list the specific options to be shown, added or removed in the AUTH, AUTHADD or AUTHREM parm. Options can be specified include:

   I   - Input jobs
   R   - Running jobs
   O   - Output jobs
   J   - Jobs menu
   G   - Output Groups
   H   - Held Groups
   M   - System Monitor
   P   - IOF Profile
  LOG  - System Log
  SR   - System Req
  DEV  - Devices
  PR   - Printers
  PUN  - Punches
  RDR  - Readers
  LINE - Lines
  INIT - Initiators
  SO   - Offloaders
  CN   - MVS Console
  MAS  - MAS Systems
  ENC  - Enclaves
  PS   - Processes
  RM   - JES2 Monitor
  APPC - APPC menu
  CMDS - Global Cmds
      Added in Release 8B
  MORE - More Cmds (replaces CMDS)
  CHK  - Health Checker
  WLM  - Workload Manager
      Added in Release 8C 
  JBC  - Job Classes
  SPV  - Spool Volumes
  NOD  - NJE Nodes

Note that AUTH, AUTHADD and AUTHREM do not grant or restrict access to an option . The only function of these parms is to control which options are displayed on the IOF Option Menu.

AUTHADD and AUTHREM parms are preferable to the AUTH parm. Future releases of IOF will add additional options. Use of the AUTH parm will  prevent future new options from appearing on the Option Menu.

After changing the B23ALLOW option, run the M18NEWOP job and refresh LLA.


 

More Help Click here to EMAIL a problem report to IOF Technical Support for additional assistance.

Previous Next

Triangle Systems, Inc. PO Box 12752, Research Triangle Park, NC 27709
(919) 544-0090

IOFTech    Problems      Release8A  Newsletters    Doc    FAQ    Q&A    Contacts    Home    Webmaster

Last Updated  07/07/2014 11:23 AM
[an error occurred while processing this directive]