Controlling recovering of dynamic exit processing

To control who can use the REQUEST=RECOVER option of the CSVDYNEX macro to have the system complete its recovery processing of a prior use of CSVDYNEX REQUEST=CALL, the RACF® security administrator can take the following steps:

  1. To establish a profile for the exit name for the FACILITY class, issue RDEFINE:
    RDEFINE FACILITY CSVDYNEX.exitname.RECOVER UACC(NONE)
    where exitname is the name of the dynamic exit. For example,
    MYEXIT
    You can use generic characters for the qualifiers in the exit name. For example,
    CSVDYNEX.MYEX*
    If you have RACF 1.9 or higher installed, you can use the following generic to cover all dynamic exit names:
    CSVDYNEX.**
    To ensure that generic profile checking is in effect for the class FACILITY, issue the following command:
    SETROPTS GENERIC(FACILITY)

    For coverage of exit names, check the names currently specified in the PROGxx parmlib members. Also use the DISPLAY PROG,EXIT system command.

  2. To permit the user (in this example user USER1) to use the REQUEST=RECOVER option of the CSVDYNEX macro for exit e, issue the following:
    PERMIT CSVDYNEX.e.RECOVER CLASS(FACILITY) ID(USER1) ACCESS(UPDATE)

    USER1 must be the name of a RACF-defined user or group profile.

    Note: Instead of specifying individual userids, you can specify the name of a RACF group profile and connect authorized users to the group. See Defining RACF profiles.
  3. If the FACILITY class is not already active, issue the SETROPTS command as follows:
    SETROPTS CLASSACT(FACILITY)

    (To ensure that the FACILITY class is active, you can issue the SETROPTS LIST command.)

  4. To refresh the FACILITY resource class, issue SETROPTS RACLIST:
    SETROPTS RACLIST(FACILITY) REFRESH