z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Tape data set protection (TAPEDSN active and TAPEVOL inactive)

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

  • Tape volumes have no RACF® protection.
  • Using the ADDSD command with the TAPE operand gives only a profile in the DATASET class; there is no tape volume profile or TVTOC. This means:
    • No checking of the RACF security retention period (the number of days that must elapse before the data set can be deleted or overwritten)
    • No RACF integrity for full 44-character data set names
    • No RACF protection for multiple data sets on a volume
  • Data management calls RACF in the DATASET class.

With TAPEDSN active and TAPEVOL inactive, data management still uses RACROUTE REQUEST=AUTH when tapes are opened for input, and RACROUTE REQUEST=DEFINE when tapes are opened for output. However, RACF does not use the TVTOC during its processing, but assumes that information such as data set name, file (data set) sequence number, and tape volume label are correct.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014