IMS restricted updates
Install PH26604 to ensure that the consistency of data is maintained between active and standby sites in an IMS replication environment by allowing only the replication program, database utilities, and authorized users to make updates to the databases at the standby site.
Prerequisites
- IMS 15.1 or IMS 15.2 with PH26604
- z/OS 2.4
- RREPL parameter in the database section of the DFSDFxxx member must be set to ABEND, STATUS, or NONE
- Facility class DFS.DB.RREPL.* defined with update access permit for selective users
Setting Restricted Update mode by using type-2 commands
UPDATE DB NAME(DB List) SET(RREPL(ABEND | STATUS | NONE))
UPDATE AREA NAME(Area List) SET(RREPL(ABEND | STATUS | NONE))
- RREPL
- Specifies whether the database (or area) is in Read-or-Replication-only mode where reads are allowed for any program, but updates are allowed only for replication programs and authorized users, and the action to take when this mode is enabled.
- STATUS
- If an update is attempted by a nonreplication and unauthorized program, the status code RR is returned on any DL/I call that would have resulted in an update.
- ABEND
- If an update is attempted by a nonreplication and unauthorized program, the program is terminated with the user abend U3303.
- NONE
- The database (or area) is not in a Read-or-Replication-only mode.
- The RREPL parameter cannot be combined with any other UPDATE DB or UPDATE AREA command options.
- The RREPL parameter cannot be set on a catalog database. The command will fail and indicate that it is an IMS defined resource and the action cannot be completed. RC=0 is issued when the UPDATE DB command is used with wildcard (*), but the catalog is not impacted.
- The RREPL parameter cannot be set on an MSDB. The command will fail and indicate that the RREPL parameter is not valid for an MSDB.
- GSAM databases are not supported. If the UPDATE DB command is used to enable Restricted Update mode on a GSAM database, RC=0 is issued, and no action will be taken.
- If the RREPL parameter set on a Fast Path or HALDB database, its value is propagated to Fast Path areas or to HALDB partitions.
- The RREPL parameter that is specified on a database is retained across WARM, ERE, and ERE COLDCOMM restarts.
- During COLD, ERE COLDBASE, and ERE COLDSYS restarts, the RREPL parameter will be set on all databases, areas, and partitions based on the value that is specified in the database section of the DFSDFxxx member.
- Updates are allowed from Fast Path utilities (Create, Compare, Scan, Delete, and Reorg) and full-function utilities (OLR and OIC) regardless of the RREPL value on the database.
Setting the default Restricted Update mode by using the DFSDFxxx member
RREPL = ABEND | STATUS | NONE | NA
- RREPL =
-
Specifies whether to enable the Restricted Update mode on all the databases where reads are allowed for any program, but updates are allowed only for replication programs and authorized users.
Note that the CREATE DB command does not set the RREPL value for the new database. You must use the UPDATE DB command to set it.
- ABEND
- Restricted Update mode is enabled, and a U3303 abend occurs when unauthorized users try to make updates.
- STATUS
- Restricted Update mode is enabled, and an RR status code occurs when unauthorized users try to make updates.
- NONE
- Restricted Update mode is not enabled, and any user can make updates. However, you can use the UPDATE DB and UPDATE AREA commands to enable the RREPL mode.
- NA
- This is the default value and means that Restricted Update mode is disabled. You cannot use the
UPDATE DB and UPDATE AREA commands to enable the RREPL mode.
If you use the UPDATE DB and UPDATE AREA commands to enable
the RREPL mode, those commands will fail with reason code 2074 and the error text
RREPL is not active
.
During cold restarts, the RREPL value in the database section of the DFSDFxxx member is used to set the RREPL value on all databases, partitions, and areas.
During warm, ERE, and ERE Coldcomm restarts, the RREPL value in the FSDFxxx member is used to enable or disable the Restricted Update mode. The RREPL value that is set to any value other than NA enables the Restricted Update mode. Note that the RREPL value in the DFSDFxxx member does not impact the RREPL setting on any database, partition, or area unless the value is set to NA.
Checking the Restricted Update mode by using type-2 commands
QUERY DB NAME(DB List) STATUS(RREPL)
QUERY DB NAME(DB List) SHOW(STATUS)
QUERY AREA NAME(Area List) STATUS(RREPL)
QUERY AREA NAME(Area List) SHOW(STATUS)
- RREPL
- Sets the STATUS() filter to return information about databases that have the Restricted Update RREPL value set to ABEND or STATUS.
Security for restricted database updates
You can restrict specific users to make DLET, ISRT, and REPL calls to databases that have Restricted Update mode enabled by setting the RREPL parameter to ABEND or STATUS.
Also, you must define the facility class DFS.DB.RREPL.*, and users must be authorized with UPDATE authority.
If an unauthorized user makes an update call to a database that uses Restricted Update mode, it will result in the 3303 abend or the RR status code depending on the RREPL parameter value.
Note that the RREPL value at the area and partition level will take precedence over the value on the database level. Also, updates are allowed from Fast Path utilities (Create, Compare, Scan, Delete, and Reorg) and full-function utilities (OLR and OIC) regardless of the RREPL value that is set on the database.
RDEF FACILITY DFS.DB.RREPL.* UACC(NONE)
PERMIT DFS.DB.RREPL.* CLASS(FACILITY) ID(USRT002, USRT005) ACCESS(UPDATE)
Log record changes
- Log record 22: The RREPLAF byte is added to indicate Restricted Update mode on an area.
- Checkpoint record 4006: RREPL flags are added to the CHKDDFG2 byte to indicate Restricted Update mode on an area.
- Checkpoint record 4084: The area level RREPL flag byte DMACRRAF is stored in 4084.
For a complete list of all of the new, changed, and deleted messages, and abend codes in IMS 15.4, see Message and code changes in IMS 15.4.
Documentation changes
The following table lists the publications that contain new or changed topics for this enhancement. Publications that are not impacted by this enhancement are not included in the table.
Publication | Links to topics | ||
---|---|---|---|
Release planning |
|
||
Commands,Volume 1: IMS Commands A - M and Volume 2: IMS Commands N - V | |||
IMS messages and codes | |||
IMS messages and codes | DFS messages | Abend and component codes |