z/OS Security Server RACF Security Administrator's Guide
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Examples of setting up program access to data sets

z/OS Security Server RACF Security Administrator's Guide
SA23-2289-00

  • You have a program named PROG1 in library 'APP.LOADLIB' that users execute in batch, and when using that program you want the users to have UPDATE access to data set 'ABC.DATA'. Otherwise, users should have READ access to the data set. Only users in group GROUPA should have access to PROG1 and 'ABC.DATA'. You should run in BASIC program security mode. Issue the following commands.
    1. RDEFINE FACILITY IRR.PGMSECURITY APPLDATA('BASIC')
    2. ADDSD 'APP.LOADLIB' UACC(READ)
    3. RDEFINE PROGRAM PROG1 ADDMEM('APP.LOADLIB'//NOPADCHK) UACC(NONE)
    4. PERMIT PROG1 CLASS(PROGRAM) ID(GROUPA) ACCESS(READ)
    5. ADDSD 'ABC.DATA' UACC(NONE)
    6. PERMIT 'ABC.DATA' ID(GROUPA) ACCESS(READ)
    7. PERMIT 'ABC.DATA' ID(*) ACCESS(UPDATE) WHEN(PROGRAM(PROG1))
    8. SETR WHEN(PROGRAM)
      However, if you have previously issued SETR WHEN(PROGRAM):
      SETR WHEN(PROGRAM) REFRESH
  • You have a program named PROG2 in library 'APP.LOADLIB' that users execute in batch, and when using that program you want the users to have UPDATE access to data set 'ABC.DATA'. Otherwise, users should have READ access to the data set. Only users in group GROUPA should have access to PROG2 and 'ABC.DATA'. You should run in ENHANCED program security mode. Issue the following commands:
    1. ADDSD 'APP.LOADLIB' UACC(READ)
    2. RDEFINE PROGRAM PROG2 ADDMEM('APP.LOADLIB'//NOPADCHK) UACC(NONE) APPLDATA('MAIN')
    3. PERMIT PROG2 CLASS(PROGRAM) ID(GROUPA) ACCESS(READ)
    4. ADDSD 'ABC.DATA' UACC(NONE)
    5. PERMIT 'ABC.DATA' ID(GROUPA) ACCESS(READ)
    6. PERMIT 'ABC.DATA' ID(*) ACCESS(UPDATE) WHEN(PROGRAM(PROG2))
    7. RDEFINE FACILITY IRR.PGMSECURITY APPLDATA('ENHANCED')
    8. SETR WHEN(PROGRAM)
      However, if you have previously issued SETR WHEN(PROGRAM):
      SETR WHEN(PROGRAM) REFRESH

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014