Enabling IMS transactions to use RACF authorization control of Db2 objects

You can enable IMS transactions to use RACF® authorization control of Db2 objects and other resources.

Procedure

To enable IMS transactions to exploit RACF authorization of Db2 objects and resources:

  1. Configure IMS to use APPC/OTMA security FULLor create an IMS Build Security Environment exit routine (DFSBSEX0). Code DFSBSEX0 to return RC4 in register 15, which will instruct IMS to create the ACEE in the dependent region.
  2. Install the default Db2 exit routine DSNX@XAC.
  3. Define a RACF profile for each Db2 object and resource to be accessed by IMS transactions.
  4. Issue the RACF PERMIT command to authorize IMS transaction authorization IDs that are allowed to access these Db2 objects and resources.