Authorizing CQS registration
When a client issues the CQSREG request to register with CQS, CQS issues a RACROUTE REQUEST=AUTH call to determine whether the client is authorized to register with CQS. RACF® checks the user ID of the client that issued the CQSREG request. This user ID must have at least UPDATE authority to register with CQS.
The RACF security administrator
can define profiles in the FACILITY class to control registration
with CQS. The profile names must be of the form CQS.cqs_id,
where cqs_id is the ID of the CQS that is to be
protected. The cqs_id value is the subsystem name
(SSN) as defined in the CQSIPxxx PROCLIB member data set, followed
by the characters CQS. For example, if the SSN is ABC,
the cqs_id value is ABCCQS.
RACF commands for authorizing CQS registration
To define a profile for CQS to prevent users other than CQSUSER1 and CQSUSER2 from registering, issue the RACF commands shown in the following example.RDEFINE FACILITY CQS.ABCCQS UACC(NONE)
PERMIT CQS.ABCCQS CLASS(FACILITY) ID(CQSUSER1) ACCESS(UPDATE)
PERMIT CQS.ABCCQS CLASS(FACILITY) ID(CQSUSER2) ACCESS(UPDATE)
SETROPTS CLASSACT(FACILITY)