Assembly / HLASM · Message ID
What does IEC150I Security Violation on OPEN Message mean in Assembly / HLASM?
The companion message to abend S913 — issued when OPEN or EOV processing fails for a password-protected dataset (typically after an operator's password reply to IEC301A), when an attempt is made to OPEN a checkpoint dataset, when a VSAM dataset is opened with a DCB rather than the correct ACB, or — the most commonly encountered case — when RACF or an equivalent security product determines the userid attempting the open lacks sufficient authority. It appears frequently on started tasks that switch to impersonate a client userid which was never granted access to a dataset the task itself allocated.
The companion message to abend S913 — issued when OPEN or EOV processing fails for a password-protected dataset (typically after an operator's password reply to IEC301A), when an attempt is made to OPEN a checkpoint dataset, when a VSAM dataset is opened with a DCB rather than the correct ACB, or — the most commonly encountered case — when RACF or an equivalent security product determines the userid attempting the open lacks sufficient authority. It appears frequently on started tasks that switch to impersonate a client userid which was never granted access to a dataset the task itself allocated.
For the RACF-authority case, check the accompanying security-violation message (such as ICH408I, or IDC3009I for RACF-specific return codes) for the exact resource and access level denied, then grant the required access or reallocate the resource under an identity that already has it; for the password-protected-dataset, checkpoint-dataset, or VSAM DCB/ACB cases, correct that specific mismatch instead — it isn't a security authorization problem.