Controlling access to HCD services

To access the HCD services remotely on z/OS, a user needs to log on to the HCD dispatcher. The log-on is done with a user ID and password as defined to the external security manager, for example, IBM Security Server RACF. The user must have the same access rights as for using HCD directly in the operating system.

If the APPL class for the security product is active, a profile can be defined to allow only certain users to log on to the HCD dispatcher. You can manage access to the HCD application by profile CBDSERVE in the APPL class. Users who are allowed to use HCD need READ access to this profile. Sample definitions for user HCDUSER for RACF look like:

RDEFINE APPL CBDSERVE UACC(NONE)
PERMIT CBDSERVE CLASS(APPL) ID(HCDUSER) ACCESS(READ)

For details about protecting applications see z/OS Security Server RACF Security Administrator’s Guidez/OS Security Server RACF Security Administrator’s Guide.