VMS bug or what have I missed in the Convert utility

[Johan Eklund_1]

Hi all,

This may seem as a long text but it isn't that complicated to follow.

I have a problem with $Convert. I do believe that the user access rights (ID_AF) are correct. I can't understand why I may create s.s;1 but not s.s;2 using $Convert. Can you?

I am greatful for any help.

/Johan


B203> cre s.s
gfsdyfoywe8åäölä Exit

B203> dire /sec s

Directory ACC_USER:[JOHANEK]

S.S;1 1/18 8-FEB-2007 11:56:39.17 [JOHANEK] (RWED,RWED,RWED,)

Total of 1 file, 1/18 blocks.

B203> cop s.s acc_af_copy:/log
%COPY-S-COPIED, ACC_USER:[JOHANEK]S.S;1 copied to ACC_AF_PROD:[COPY]S.S;1 (1 block)

B203> dire /sec acc_af_copy:s

Directory ACC_AF_PROD:

S.S;1 1/18 8-FEB-2007 11:56:39.17 [JOHANEK] (RWED,RWED,RWED,)
(IDENTIFIER=ID_AF,ACCESS=READ+WRITE+EXECUTE+DELETE)

Total of 1 file, 1/18 blocks.

B203> dire /sec ACC_AF_PROD:<000000>copy

Directory ACC_AF_PROD:<000000>

COPY.DIR;1 214/1404 30-MAY-1998 20:17:59.60 [SYSTEM] (RWE,RWE,RE,E)
(IDENTIFIER=ID_AF,ACCESS=READ+WRITE+EXECUTE)
(IDENTIFIER=ID_AF,OPTIONS=DEFAULT,ACCESS=READ+WRITE+EXECUTE+DELETE)

Total of 1 file, 214/1404 blocks.

B203> set watch /clas=majo file
%SYSTEM-F-NOPRIV, insufficient privilege or object protection violation
B203> allp
B203> set watch /clas=majo file
%XQP, Thread #0, Deaccess (744,3,0) Reads: 6, Writes: 0, Status: 00000001
B203> defpriv
B203> set proces/priv=noreadall
B203> sho proces/priv

8-FEB-2007 11:59:11.70 User: JOHANEK Process ID: 2060DC3E
Node: B203 Process name: "JOHANEK_1"

Authorized privileges:
GRPNAM NETMBX OPER SETPRV SYSLCK TMPMBX

Process privileges:
NETMBX may create network device
TMPMBX may create temporary mailbox

Process rights:
%XQP, Thread #0, Access RIGHTSLIST.DAT;2 (4278,99,0) Status: 00000001
JOHANEK resource
INTERACTIVE
LOCAL
ID_AF
NET$MANAGE

System rights:
SYS$NODE_B203

Soft CPU Affinity: off
%XQP, Thread #0, Deaccess (4278,99,0) Reads: 18, Writes: 0, Status: 00000001
B203> reca conv
B203> CONVERT/TRUNCATE/FDL=ACC_AF_COM:AF_BGC_80_RECLEN.FDL acc_af_copy:s.s acc_af_copy:s.s
%XQP, Thread #0, Access CONVERT.EXE;1 (49774,1,0) Status: 00000001
%XQP, Thread #0, Access CONVSHR.EXE;1 (50055,1,0) Status: 00000001
%XQP, Thread #0, Access FDLSHR.EXE;1 (50132,1,0) Status: 00000001
%XQP, Thread #0, Access AF_BGC_80_RECLEN.FDL;16 (31449,35,0) Status: 00000001
%XQP, Thread #0, Control function (31449,35,0) Status: 00000001
%XQP, Thread #0, Access RIGHTSLIST.DAT;2 (4278,99,0) Status: 00000001
%XQP, Thread #0, Deaccess (31449,35,0) Reads: 1, Writes: 0, Status: 00000001
%XQP, Thread #0, Lookup (8847,76,0) Status: 00000001
%XQP, Thread #0, Access S.S;1 (8847,76,0) Status: 00000001
%XQP, Thread #0, Control function (8847,76,0) Status: 00000001
%XQP, Thread #0, Create/Access S.S;2 (9259,73,0) Status: 00000024
%XQP, Thread #0, Deaccess (8847,76,0) Reads: 1, Writes: 0, Status: 00000001
%XQP, Thread #0, Access (0,0,0) Status: 00000910
%XQP, Thread #0, Access SORTMSG.EXE;1 (2232,3,0) Status: 00000001
%XQP, Thread #0, Control function (2232,3,0) Status: 00000001
%CONV-F-OPENOUT, error opening ACC_AF_PROD:S.S; as output
-RMS-E-PRV, insufficient privilege or file protection violation
%XQP, Thread #0, Deaccess (4278,99,0) Reads: 5, Writes: 0, Status: 00000001
%XQP, Thread #0, Deaccess (49774,1,0) Reads: 6, Writes: 0, Status: 00000001
%XQP, Thread #0, Deaccess (50055,1,0) Reads: 9, Writes: 0, Status: 00000001
%XQP, Thread #0, Deaccess (50132,1,0) Reads: 9, Writes: 0, Status: 00000001
%XQP, Thread #0, Deaccess (2232,3,0) Reads: 3, Writes: 0, Status: 00000001
B203> allp
B203> SET WATCH/CLASS=none file
%XQP, Thread #0, Access (0,0,0) Status: 00000910
%XQP, Thread #0, Access SETWATCH.EXE;1 (744,3,0) Status: 00000001
%XQP, Thread #0, Control function (744,3,0) Status: 00000001
B203>

[Edwin R. van der Kaaij]

it's a lot of text indeed :o) i have not had time to simulate your problem, but

can you set default to: ACC_AF_PROD:[COPY]

then setting the identical privileges like above and then try to copy s.s;1 to s.s;2

if that does not work, then it's not a specific convert problem.

i have a feeling that the uic protection on the directory copy.dir is stopping the creation of s.s;2

[Hein van den Heuvel]

0) It is very, very, unlikely to be a CONVERT bug. Convert just calls FDL and RMS so at best is just a messenger.

It might be an FDL bug, but that's still unlikely. More like a usage misunderstsanding.


1) So what's in the FDL? Specifically the FILE section where the OWNER may be defined.

2) Does $CREATE/FDL have the same 'problem' ?

3) May the AUDIT shows clearer detail, allthough the SET WATCH it pretty clear.

Regards,
Hein van den Heuvel

[Jan van den Ende]

Johan,

from your Forum Profile:


I have assigned points to 3 of 14 responses to my questions.

Even dating back to 2005...

Maybe you can find some time to do some assigning?

http://forums1.itrc.hp.com/service/forums/helptips.do?#33

Mind, I do NOT say you necessarily need to give lots of points. It is fully up to _YOU_ to decide how many. If you consider an answer is not deserving any points, you can also assign 0 ( = zero ) points, and then that answer will no longer be counted as unassigned.
Consider, that every poster took at least the trouble of posting for you!

To easily find your streams with unassigned points, click your own name somewhere.
This will bring up your profile.
Near the bottom of that page, under the caption "My Question(s)" you will find "questions or topics with unassigned points " Clicking that will give all, and only, your questions that still have unassigned postings.

Thanks on behalf of your Forum colleagues.

PS. - nothing personal in this. I try to post it to everyone with this kind of assignment ratio in this forum. If you have received a posting like this before - please do not take offence - none is intended!

PPS. - Zero points for this.

Proost.

Have one on me.

jpe

[Hein van den Heuvel]

Jan, the body is still warm. In fact the problem is not even dead yet, give Johan a chance to savour each reply for its own merit! :-).

Johan,
Meant to add that a common cause for failure to create a new file is in fact failure to delete a prior version as dictated by VERSION LIMITS ?!

And if $CREATE/FDL also fails, then what about a simple $CREATE ACC_AF_PROD:s.s/LOG ?

Finally, I don't believe you showed us the definition of ACC_AF_PROD. That is not a surprise search list is it?

Hein.

[Jan van den Ende]

Hein,

>>>
Jan, the body is still warm. In fact the problem is not even dead yet, give Johan a chance to savour each reply for its own merit! :-).
<<<

I only try to get (not only Johan's, but any posters) attention before the thread might loose his/her attention.
... and the referenced 2005 issues _DO_ trigger a suspicion of having been forgotten...

As for the current subject: my first thought would also be Version limit, either on the directory or on the existing file.

Ownership specified in the FDL incompatible with directory protection would be my second guess.

fwiw

Proost.

Have one on me.

jpe

[Johan Eklund_1]

At first, let me respond to Edwin:

I did share your feeling about the Directory protection and tried setting World:RWE and it all worked as it should.

Still, I do not agree with the behaviour of VMS because I think I have set it up correctly and according to the intentions. Please comment on that one.

But, maybe I missed something about the definition of the lnm of the directory:

B203> sho log/full acc_af_copy
"ACC_AF_COPY" [super] = "ACC_AF_PROD:" (ACC_AF_PROD_LOGICALS)

B203> sho log /full acc_af_prod
"ACC_AF_PROD" [exec] = "ACC_DISK106:" [concealed] (LNM$SYSTEM_TABLE)
B203>

TO HEIN:
The Version Limt idea was good. I had forgotten about that one. Although this was not the case here.

TO JAN:
I do think you are right in your comments about my inability to give away points. I will be a better netcitizen soon.

best regards
Johan

[Edwin R. van der Kaaij]

did you try the create?

from memory ACL's are checked first
the UIC protection, then priv's.

According to that logic it should work
the way you have set it up.

If I have time I'll try to simulate it.