Resources protected by the FACILITY general resource class
The FACILTY general resource class is used to protect several different system resources.
They are:
- Library lookaside (LLA) libraries
- The FACILITY class controls a program's ability to use the LLACOPY macro. For more information, see Authorizing access with the MVS library lookaside (LLA) facility.
- The CICS interregion communication program, DFHIRP
- The FACILITY class controls a region's ability to log on to the CICS interregion communication program, DFHIRP. For more information, see Implementing MRO security.
- Shared data tables
- The FACILITY class controls a file-owning region's ability to act as a shared data table server. For more information, see Security for CICS shared data tables.
- Coupling facility data tables
- The FACILITY class controls the following:
- The ability of a CICS region to connect to a coupling facility data table (CFDT)
- The ability of the CFDT server to act as a server for a CFDT pool
- The ability of the CFDT server region to connect to the coupling facility list structure for its CFDT pool
- Named counter servers
- The FACILITY class controls the following:
- The ability of a CICS region to connect to a named counter server
- The ability of the named counter server to act as server for a named counter pool
- The ability of the named counter server region to connect to the coupling facility list structure for its named counter pool
- Shared temporary storage
- The FACILITY class controls the following:
- The ability of a CICS region to connect to a shared temporary storage (TS) server
- The ability of the shared TS server to act as server for a shared TS pool
- The ability of the shared TS server region to connect to the coupling facility list structure for its shared TS pool
- Log streams
- The FACILITY class controls the ability of a CICS region to connect to the coupling facility list structures used for MVS log streams. For more information, see Authorizing access to MVS log streams.
- AUTHTYPE and COMAUTHTYPE userids in DB2® definitions
- The FACILITY class controls the following:
- The ability of users to install DB2CONN and DB2ENTRY definitions that specify the AUTHID or COMMAUTHID attributes
- The ability of users to use a CREATE DB2CONN or CREATE DB2ENTRY command that specifies the AUTHID or COMMAUTHID attributes
- The ability of users to change the AUTHID or COMMAUTHID attributes of an installed DB2CONN or DB2ENTRY
- CICSPlex® SM resources
- The FACILITY class controls access to a many CICSPlex SM resources. For more information, see Implementing CICSPlex SM security.