RE: [Security400] Debug anomaly

["Ed Fishel" <edfishel@xxxxxxxxxx>]

David,

>                         I do have all of the
>rights to the program, source, and library that the
>manual says are required via my effective group.
>I really just want to understand what is happening.
>Effective groups and swaps are not very well
>documented, but 99.9% of the time they work the
>same as a base profile/group/supplemental group.
>
>The really weird thing to me is that changing the
>group of the executing job allows debug. I don't
>think I have ever seen a case where authority is
>derived from the profile at run time. It is always to
>the last swap or signon. I have not changed any
>authority whatsoever and I can make it work by
>changing the group. That is the second anomaly.
>On the other hand, I could have simply missed
>that passage in the manual.

Up until now I have been confused by this discussion. Perhaps I still am.
The reason to change the effective group profile of the job is to get more
or less authority. The only time authority is derived from a profile or
group profile is at runtime. So if the effective group profile is different
at the time you do DSPMODSRC than it is at STRDBG then what you are seeing
may make perfect sense.

Ed Fishel,
edfishel@US.IBM.COM