OA64085: RECREATE OF RACFVARS PROFILE RESULTS IN MEMBER LISTS BEING REVERSED

Obtain the fix for this APAR.

APAR status

• Closed as program error.

Error description

• Recreate of RACFVARS profile results in member lists being
  reversed.
  
  This is because RACF adds the members to the profile in reverse
  order with the ADDMEM operand of the RALTER command.
  When zSecure generates the RALTER ADDMEM commands to recreate
  the profile it takes the member names from the profile in the
  forward order.
  
  The order is only relevant for RACFVARS, and then only if you
  have a member that is a proper substring of another member.
  

Local fix

• N/A
  

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of zSecure Admin exploiting the        *
  *                 "Recreate general resource profile" function *
  *                 ('R' action character against profile on the *
  *                 RA.R summary display) and/or the "Recreate   *
  *                 general resource profile(s)" function        *
  *                 (RA.4.9 option) in interactive mode to       *
  *                 recreate profiles in the RACFVARS class.     *
  ****************************************************************
  * PROBLEM DESCRIPTION: zSecure Admin generates incorrectly     *
  *                      sorted sequence of the 'addmem' RACF    *
  *                      commands that define members in a       *
  *                      RACFVARS class profile.                 *
  ****************************************************************
  * RECOMMENDATION: Apply the PTF provided and review the        *
  *                 documentation updates.                       *
  ****************************************************************
  When recreating a RACF profile in the RACFVARS class, zSecure
  Admin generated a sequence of the 'RALTER ... ADDMEM' commands
  for each profile member. However, the order of these commands
  is not correct, so that the recreated profile does not have the
  same order of members as the original profile.
  

Problem conclusion

• zSecure Admin has been modified, so that it generates correct
  sequence of commands that define members in a RACFVARS profile
  being recreated. Please note the documentation changes as
  provided by the APAR tracking comment data.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Modules/Macros

• CKRINMO  CKROUNIT CKRPUTV  CKRXCRE  CKRXRRE  GKRINMO  GKROUNIT
  GKRPUTV
  

Fix information

• Fixed component name

  ZSEC BASE,ADMIN

• Fixed component ID

  5655T0100

Applicable component levels

• R250 PSY UJ92031

     UP23/01/21 P F301

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.