Overriding DBRC security on the RECON data set

You can create a copy of the production RECON data set for test purposes or to send to IBM® Software Support to help re-create a problem with the original RECON data set.

A copy of the RECON data set inherits the security settings of the original RECON data set. Disable DBRC security for a copy of the RECON data set when the copy needs to be accessed by someone lacking the level of authorization required by the current security settings.

To create a copy of the RECON data set that does not inherit the security settings of the original RECON data set:

Procedure

  1. Issue the CHANGE.RECON command with the rcnqual option.
    If the rcnqual value is not a substring of the RECON COPY1 data set name, the command bypasses security. However, if the rcnqual value is a substring of the RECON COPY data set name, the command bypasses security only if the rcnqual value is followed by an asterisk (*) and not at the beginning of the data set name. For example, if rcnqual=IMSTEST*, and IMSTESTL.RECON1 is copied into RCNCOPY.IMSTESTL.RECON1, security would be bypassed because the copied data set name contains the rcnqual value, but does not begin with it. If rcnqual=IMSTEST, security would not be bypassed for the copied data set.
  2. Create the copies of the production RECON data set with names that do not contain the string that was specified in the rcnqual option.
    These copies of the RECON data set can be accessed by those without command authorization.
When an attempt to use the copies is made, the system compares the string value stored in the RECON data set against the RECON COPY1 data set name. Once it verifies that the strings do not match and the string in the copy is not a substring of the RECON data set, message DSP1211W is issued which notifies the user that the current level of command authorization is not being enforced.

After message DSP1211W is issued, data sets without command authorization can complete testing or debugging against the copy of the RECON data set. Message DSP1211W also is issued after every subsequent command as a warning message.