Previous topic |
Next topic |
Contents |
Contact z/OS |
Library |
PDF
Adding installation-defined classes to the static class descriptor table z/OS Security Server RACF System Programmer's Guide SA23-2287-00 |
|
There are two ways for an installation to define resource classes:
Guideline: Define your classes in the dynamic class descriptor table, to avoid the need to re-IPL. An installation can add, modify, or delete installation-defined
entries in the static class descriptor table using the ICHERCDE macro.
The ICHERCDE macro cross-checks entries in the class descriptor table
for errors. Each installation-defined class entry becomes a
CSECT in load module ICHRRCDE. The ICHERCDE macro produces a CSECT
for each invocation.
The ICHERCDE macro generates class entries for the RACF® static class descriptor table. Each entry in the installation-defined static class descriptor table becomes a CSECT in load module ICHRRCDE. The module resides in SYS1.LINKLIB or any other APF-authorized linklist library. To add a class entry, specify the ICHERCDE macro for each class you are adding. Follow this procedure:
If you are adding new classes to a load module previously created,
you do not have to reassemble your unchanged class entries. You can
use the LKED INCLUDE SYSLMOD statement to copy the
previous version. For example, if your ICHRRCDE load module contains
four classes and you are adding a fifth, here are some sample linkage
editor statements to add the fifth entry to your load module:
The RACTABLE member of SYS1.SAMPLIB contains a sample job. For information on the class descriptor table and class entries used by CICS®, see CICS RACF Security Guide, available at http://publib.boulder.ibm.com/infocenter/cicsts/v3r1/index.jsp. |
Copyright IBM Corporation 1990, 2014
|