Because the server address spaces started on behalf of an application environment can run in problem program state, workload management enables you to check the validity of a server through an SAF product such as RACF®. When the server is being created, workload management makes an SAF call using a new SERVER class to check whether the server is valid for the application environment. If you do not have the SERVER class defined to your SAF product, workload management allows the server address space to be started.
You can use the SERVER and STARTED classes with a SAF product to restrict access to application environment servers. For example, if you are using DB2®, SOM or IWEB servers with application environments, you first associate a userid with the MVS™ procedure name being used to start the server. This is done using the STARTED resource class or by changing ICHRIN03 (started procedures table). Then you use the SERVER resource class to authorize this userid, and possibly others, to become a server for DB2 stored procedures, SOM method requests, or Internet Connection Server web requests.