Restricting database updates

You can restrict certain users to make DLET, ISRT, and REPL calls to databases that have Restricted Update mode enabled (RREPL attribute is set to ABEND or STATUS).

The facility class DFS.DB.RREPL.* must be defined, and users must be permitted to make database changes with UPDATE authority.

If an unauthorized user makes an update call to a database that has Restricted Update mode enabled, it results in a 3303 abend or the RR status code depending on the RREPL value.

The RREPL value at the area and partition level will take precedence over the value on the database level.

Updates are allowed from Fast Path utilities (Create, Compare, Scan, Delete, and Reorg) and full-function database utilities (OLR and OIC) regardless of the RREPL setting on the database.

The following sample RACF command defines the facility class and grants authorization to USRT002 and USRT005:

RDEF FACILITY DFS.DB.RREPL.* UACC(NONE)
PERMIT DFS.DB.RREPL.* CLASS(FACILITY) ID(USRT002, USRT005) ACCESS(UPDATE)