Question on ACS and working with the IFS....

I loaded up ACS for a Finance user and created an icon that opens up the Integrated File System to a directory where they need to retrieve a positive pay file.

We found that, while the user can download the file with no problem, she cannot copy/paste the file into a backup folder on the IFS. Doing so creates an error because she doesn't have access to the CRTLIB command. This leaves the session in a loop of security failures. After killing the ACS program, I still had to go onto the system and cancel the looping IBM i/Power job.

I found that hard to believe, so I tried it under QSECOFR and sure enough, the Messages show:
02/05/2021, 07:34:20 AM Preparing to paste
02/05/2021, 07:34:22 AM Library QIFS2BB728 created.
02/05/2021, 07:34:23 AM File P7300 created in library QIFS2BB728.
02/05/2021, 07:34:23 AM Saving /E920/PD920/Export/01.26.2021PP.txt into QIFS2BB728/P7300
02/05/2021, 07:34:23 AM 1 objects saved.
02/05/2021, 07:34:24 AM Restoring /E920/PD920/Export/Positive Pay/01.26.2021PP.txt from QIFS2BB728/P7300
02/05/2021, 07:34:26 AM 1 objects restored.
02/05/2021, 07:34:26 AM Removing library QIFS2BB728 from E1ENT02.us.global.spiraxsarco.com
02/05/2021, 07:34:27 AM Directory removed.
02/05/2021, 07:34:27 AM Successfully pasted 1 of 1 objects

I don't understand how this can be working right. It would mean I have to give an IFS user access to BOTH the CRTLIB and DLTLIB (which I assume is behind the "Removing library QIFS2BB728 from E1ENT02.us.global.spiraxsarco.com" portion above) commands.

Does anyone else get this?

V7R3, all PTFs groups current as of last Sunday. I have some Backup/Recovery and Performance Tools updates scheduled to go in Sunday.




_____________________________________________________________________
Spirax-Sarco Engineering Plc. This e-mail has been scanned for viruses by Cisco Cloud Email Security.