OA60396: ACF2 ALERTS 2105/2106 YIELD INCORRECT RESULTS WHEN A SINGLE ACF2CHANGE COMMAND HAS MULTIPLE UPDATES

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• When changing an ID that has SECURITY READALL and NON-CNCL, the
  following alert is generated
  
  SCENARIO 1
  
  Issue ACF2 command: Change USERA03 NOSECURITY READALL NON-CNCL
  
  1. Alert: System authority granted to USERA03
  System-level authority granted to user
  
     Alert id        2105
     Date and time   26Oct2020 19:26:54.47
     Authority       SECURITY READALL NON-CNCL
     Granted to      USERA03
     Logonid         USERA01  ACF2 ADMIN
     Job name        USERA01
     System ID       ZS37
  
  2. Alert: System authority removed from USERA03
  System-level authority removed from user
  
     Alert id        2106
     Date and time   26Oct2020 19:26:42.20
     Authority       SECURITY
     Removed from    USERA03
     Logonid         USERA01  ACF2 ADMIN
     Job name        USERA01
     System ID       ZS37
  
  
  The SECURITY authority already exists and should not be listed
  on the 2105 Alert. The 2106 Alert is correct
  
  
  SCRNARIO 2
  
  Issue ACF2 command: Change USERA03 SECURITY NOREADALL NONON-CNCL
  
   Alert: System authority removed from USERA03
   System-level authority removed from user
  
      Alert id        2106
      Date and time   26Oct2020 19:26:54.47
      Authority       SECURITY READALL NON-CNCL
      Removed from    USERA03
      Logonid         USERA01  ACF2 ADMIN
      Job name        USERA01
      System ID       ZS37
  
  The SECURITY authority is NOT being removed from the user
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Alert for ACF2 that exploit *
  *                 the predefined alerts 2105 and 2106.         *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Alert might report an incorrect *
  *                      value in the 'Authority' field of       *
  *                      predefined ACF2 alerts 2105 (System     *
  *                      Authority Granted) and 2106 (System     *
  *                      Authority Removed).                     *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided.                      *
  ****************************************************************
  When an ACF2 command contains changes to multiple system
  authorities that are logged by the same SMF record, zSecure
  Alert reports an incorrect value in the 'Authority' field of
  predefined ACF2 alerts 2105 (System Authority Granted) or 2106
  (System Authority Removed).
  

Problem conclusion

• zSecure Alert is modified so that it reports correct a value
  in the 'Authority' field of predefined ACF2 alerts 2105 (System
  Authority Granted) and 2106 (System Authority Removed).
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UJ04410

Modules/Macros

• C2PS1105 C2PS1106
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R240 PSY UJ04410

     UP20/11/21 P F011

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.