ICH430I

Explanation
 The user has only EXECUTE authority to the named
program, by way of the PROGRAM profiles or the DATASET profile for
the library, and ENHANCED PGMSECURITY mode is in effect (FACILITY
profile  IRR.PGMSECURITY exists with an APPLDATA value of ENHANCED)
and the environment was established  by a program that did not have
the MAIN attribute.  This would normally cause RACF® to prohibit use of the program by this
user, but RACF allowed it because
the administrator enabled the WARNING mode for ENHANCED PGMSECURITY.
 This access fails if the administrator instead enables the ENHANCED
mode of PGMSECURITY.

System action
 RACF allows
the requested access, but issues the warning message.

Routing code
9 and 11

Descriptor code
6

RACF Security
Administrator Response
Or user Response: 
Check
for additional messages that  provide further details, such as ICH428I.
Verify that the first program executed in this execution environment
(jobstep, or specified  on TSOEXEC command or by way of IKJEFTSR service)
has a PROGRAM profile that specifies the MAIN  attribute.  If not,
redefine the program to have MAIN, if it is a program that you  trust
to maintain the environment properly for using conditional access,
or change the  way you invoke the program (for example, under TSO
consider invoking the program by way of the TSOEXEC command), or change
the option to BASIC PGMSECURITY mode, or define the program  as one
that needs BASIC PGMSECURITY mode by defining it with a specific PROGRAM
profile that  has an APPLDATA value of BASIC.  Using a PROGRAM profile
with BASIC  provides less security, but might be necessary for some
programs where you cannot use TSOEXEC.
Do not enable the failure
mode of ENHANCED PGMSECURITY before you resolve this message, or the
accesses fail.

Explanation

System action

Routing code

Descriptor code

RACF Security Administrator Response