Question on ACS and working with the IFS....

["Andrew Lopez (SXS US)" <Andrew.Lopez@xxxxxxxxxxxxxxxxxx>]

I loaded up ACS for a Finance user and created an icon that opens up the Integrated File System to a directory where they need to retrieve a positive pay file.

We found that, while the user can download the file with no problem, she cannot copy/paste the file into a backup folder on the IFS.  Doing so creates an error because she doesn't have access to the CRTLIB command.  This leaves the session in a loop of security failures.  After killing the ACS program, I still had to go onto the system and cancel the looping IBM i/Power job.

I found that hard to believe, so I tried it under QSECOFR and sure enough, the Messages show:
02/05/2021, 07:34:20 AM  Preparing to paste
02/05/2021, 07:34:22 AM  Library QIFS2BB728 created.
02/05/2021, 07:34:23 AM  File P7300 created in library QIFS2BB728.
02/05/2021, 07:34:23 AM  Saving /E920/PD920/Export/01.26.2021PP.txt into QIFS2BB728/P7300
02/05/2021, 07:34:23 AM  1 objects saved.
02/05/2021, 07:34:24 AM  Restoring /E920/PD920/Export/Positive Pay/01.26.2021PP.txt from QIFS2BB728/P7300
02/05/2021, 07:34:26 AM  1 objects restored.
02/05/2021, 07:34:26 AM  Removing library QIFS2BB728 from E1ENT02.us.global.spiraxsarco.com
02/05/2021, 07:34:27 AM  Directory removed.
02/05/2021, 07:34:27 AM  Successfully pasted 1 of 1 objects

I don't understand how this can be working right.  It would mean I have to give an IFS user access to BOTH the CRTLIB and DLTLIB (which I assume is behind the "Removing library QIFS2BB728 from E1ENT02.us.global.spiraxsarco.com" portion above) commands.

Does anyone else get this?

V7R3, all PTFs groups current as of last Sunday.  I have some Backup/Recovery and Performance Tools updates scheduled to go in Sunday.




_____________________________________________________________________
Spirax-Sarco Engineering Plc.  This e-mail has been scanned for viruses by Cisco Cloud Email Security.