IV36050: USER ACCESS NOT GETTING TRANSFERED TO CHILD TASK

APAR status

• Closed as program error.

Error description

• Error Message: ICH408I USER(RDZRSED ) GROUP($STCTP  ) NAME(RDZ -
  RSE DAEMON )
        /u/tp45680/rexx CL(DIRSRCH
  )FID(00000000000000000F2B00029AED0000)
        INSUFFICIENT AUTHORITY TO CHDIR
  
        ACCESS INTENT(--X)  ACCESS ALLOWED(OTHER      ---)
  .
  Stack Trace: N/A
  .
  The JDK no longer uses the user's credentials for authorization
  to browse files, directories, etc, but uses the started task's
  permissions.
  

Local fix

• Provide the same access to started task as user access.
  

Problem summary

• In JDK 6, the ForkAndExec call to the native side is invoked
  from the parent thread itself where as in JDK 7, a reaper demon
  thread is attached to the main thread and the ForkAndExec call
  is invoked from the reaper demon thread instead.
  When the user identity of the parent thread (userA) is set to
  another user(userB), the new process should be able to access
  userB datasets. As the exec process happened in the reaper demon
  thread which has the default userA access, it could not access
  userB datasets.
  

Problem conclusion

• This defect will be fixed in:
  7.0.0 SR5
  .
  The JDK is updated to invoke the ForkAndExec call from the
  parent thread instead of the child demon thread.
  

Temporary fix

Comments

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

Fix information

• Fixed component name

  JAVA CLASS LIBS

• Fixed component ID

  620700130

Applicable component levels

• R700 PSY

     UP