Protecting applications

For applications that specify the APPL operand on the RACROUTE REQUEST=VERIFY macro, you can use a profile in the APPL class to control which users can access the application.

To do this, perform the following steps:

Determine the name of your application.
Verify with your programmer that the name of the application is specified on the APPL operand of the RACROUTE REQUEST=VERIFY macro.
Create a profile in the APPL class:
```
RDEFINE APPL applname UACC(NONE)
```

Give users and groups READ access, as appropriate.

PERMIT applname CLASS(APPL) ID(userid or groupname) ACCESS(READ)

If you have not already done so, activate the APPL class:
```
SETROPTS CLASSACT(APPL)
```
For performance reasons, request SETROPTS RACLIST or SETROPTS GENLIST processing for the APPL class.
Note: This might be important if many users enter the system under control of your application (where your application issues the RACROUTE REQUEST=VERIFY macro for each user).

For information on how authorization checking takes place, see Authorizing access to RACF-protected applications.

For details about how CICS® uses APPL profiles to control access to CICS regions, visit CICS Transaction Server for z/OS Information Center..