Activating IMS DBCTL security

This topic gives guidance on the steps you take to activate your IMS security design using RACF® and program exit routines.

Depending upon the security facilities you choose to use, you must perform the appropriate tasks.

Prepare a RACF security plan in DBCTL.

To implement a RACF security plan:

  1. Prepare a list of all the of IMS online resources to be protected, arranging them in groups to give an overview of the total resources covered.
  2. Select the security facilities that protect the resource groups.
  3. Code the IMSGEN macro or initialization EXEC parameters.
  4. Describe the resource class profiles to RACF.
  5. Add users, groups, and data sets to RACF.
  6. Modify JCL procedures in IMS.PROCLIB.
RACF resource classes are used by the IMS security function. The PSB class holds profiles for PSB security. RACF provides predefined resource classes or you can define your own. The names of resource classes to be used are specified with the RCLASS= parameter. Table 1 shows resource class assignments for DBCTL.
Table 1. Resource class assignments for DBCTL
Resource class Resource class naming convention
RACF-defined name User-defined name
PSB resource class IIMS Ixxxxxxx

PSB group
resource class

 JIMS Jxxxxxxx

APSB resource class

 AIMS Axxxxxxx

The RACF resource classes are defined in RACF's resource class descriptor table (CDT). Initially, the AIMS, IIMS, and JIMS resource classes are predefined in the CDT. To add a resource class or to define resource classes with user-defined names, you must use the RACF resource class macro ICHERCDE to create an installation-defined CDT.

Related reading: For more information about the RCLASS EXEC parameter, see IMS Version 15 System Definition.