KB Article #178194

End of transfer procedure user problem - INSUFFICIENT ACCESS AUTHORITY

Problem

The CFT user is used to read the EOT procedure instead of the transfer owner


The EOT JCL is deducted from the transfer PARM parameter


EXEC=&PARM


Transfer owner have read access to the EOT procedure while CFT user don't.


Resolution

The monitor UserID is always used to read the EOT procedure template.


All variables replacement in an EOT procedure are managed by the CFT UserID before being submitted.


Workaround: To comply to the requirement, there is an alternative approach:


In the reported issue, where the JCL to be submitted is accessible only by the owner of the transfer, it is possible to use a 'relay JCL', which, in its turn, will submit the target EOT JCL using the expected UserID and after having replaced all CFT variables.


For a CFTRECV, the relay JCL will be set as below:


CFTRECV EXEC=..EXEC(EXECALT1)



The delivered relay JCL sample (EXECALT1) is set to deal with that use case where the EOT procedure JCL is retrieved from the PARM variable.




Of course, the sample and can be updated to your requirement.


Note: The relay JCL sample 'EXECALT1' is delivered with CFT from version 3.2.2 SP1
Note2: The relay JCL is fully documented, please, check it out for more details.


For convenience, the sample JCL and REXX are attached to that article: AlternativeEXEC.zip