z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Authorization checking for protected SMS classes

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

During allocation of an SMS-managed data set, DFP performs a RACF® authorization check to verify that the data set owner is allowed to use the specified MGMTCLAS and STORCLAS. If the data set owner does not have at least READ authority to both of these classes, RACF denies the request. As a result, DFP does not allocate the data set.

This authorization checking occurs regardless of the source of the DATACLAS, MGMTCLAS, or STORCLAS values. It does not matter whether they were supplied as RACF defaults, through the ACS routines, or by the user through JCL or dynamic allocation parameters.

Note: If the data set owner is a revoked user ID, the allocation fails.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014