APAR status
Closed as program error.
Error description
Error Message: ICH408I USER(RDZRSED ) GROUP($STCTP ) NAME(RDZ - RSE DAEMON ) /u/tp45680/rexx CL(DIRSRCH )FID(00000000000000000F2B00029AED0000) INSUFFICIENT AUTHORITY TO CHDIR ACCESS INTENT(--X) ACCESS ALLOWED(OTHER ---) . Stack Trace: N/A . The JDK no longer uses the user's credentials for authorization to browse files, directories, etc, but uses the started task's permissions.
Local fix
Provide the same access to started task as user access.
Problem summary
In JDK 6, the ForkAndExec call to the native side is invoked from the parent thread itself where as in JDK 7, a reaper demon thread is attached to the main thread and the ForkAndExec call is invoked from the reaper demon thread instead. When the user identity of the parent thread (userA) is set to another user(userB), the new process should be able to access userB datasets. As the exec process happened in the reaper demon thread which has the default userA access, it could not access userB datasets.
Problem conclusion
This defect will be fixed in: 7.0.0 SR5 . The JDK is updated to invoke the ForkAndExec call from the parent thread instead of the child demon thread.
Temporary fix
Comments
APAR Information
APAR number
IV36050
Reported component name
JAVA CLASS LIBS
Reported component ID
620700130
Reported release
700
Status
CLOSED PER
PE
NoPE
HIPER
NoHIPER
Special Attention
NoSpecatt
Submitted date
2013-01-29
Closed date
2013-03-22
Last modified date
2013-03-22
APAR is sysrouted FROM one or more of the following:
APAR is sysrouted TO one or more of the following:
Fix information
Fixed component name
JAVA CLASS LIBS
Fixed component ID
620700130
Applicable component levels
R700 PSY
UP
[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSNVBF","label":"Runtimes for Java Technology"},"Platform":[{"code":"PF025","label":"Platform Independent"}],"Version":"7.0","Line of Business":{"code":"LOB36","label":"IBM Automation"}}]
Document Information
Modified date:
21 February 2022