Previous topic |
Next topic |
Contents |
Contact z/OS |
Library |
PDF
GENLIST processing z/OS Security Server RACF System Programmer's Guide SA23-2287-00 |
|
The GENLIST operand on the SETROPTS command improves performance by copying generic profiles from the RACF® database. The profile copies are put in an extended common storage area (ECSA). Using GENLIST saves real storage because generic profiles are not duplicated in each user's address space. I/O is required only once to bring them into storage for all address spaces to use, instead of each address space needing to perform the I/O. RACF uses these profile copies to check the authorization of any user who wants to access a resource the profiles protect, if RACF does not find a discrete profile for the resource in the RACF database. To activate GENLIST processing, a user with the SPECIAL attribute
issues the SETROPTS command:
Use SETROPTS GENLIST when the class contains a small number of frequently referenced generic profiles. If you issue a SETROPTS GENLIST on one system, that action is propagated to other systems that share the RACF database. You do not need to issue the SETROPTS GENLIST command separately for each system. In-storage profiles for the following classes supplied by IBM® can be shared by using SETROPTS GENLIST:
Generic profiles for the DATASET class will continue to be created within each address space and chained off the ACEE. |
Copyright IBM Corporation 1990, 2014
|