z/OS Security Server RACF Macros and Interfaces
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


Data set record formats

z/OS Security Server RACF Macros and Interfaces
SA23-2288-00

The records associated with data sets are:
  • Data Set Basic Data
  • Data Set Categories
  • Data Set Conditional Access
  • Data Set Volumes
  • Data Set Access
  • Data Set Installation Data
  • Data Set DFP Data
  • Data Set TME Data

Data set basic data record (0400)

The Data Set Basic Data record defines the basic information for a data set. There is one record per data set profile.

Table 1. Data Set Basic Data Record.

Defines the basic information about a data set.

Field Name Type Position Comments
Start End
DSBD_RECORD_TYPE Int 1 4 Record type of the Data Set Basic Data record (0400).
DSBD_NAME Char 6 49 Data set name as taken from the profile name.
DSBD_VOL Char 51 56 Volume upon which this data set resides. Blank if the profile is generic, and *MODEL if the profile is a model profile.
DSBD_GENERIC Yes/ No 58 61 Is this a generic profile?
DSBD_CREATE_DATE Date 63 72 Date the profile was created.
DSBD_OWNER_ID Char 74 81 The user ID or group name that owns the profile.
DSBD_LASTREF_DATE Date 83 92 The date that the data set was last referenced.
DSBD_LASTCHG_DATE Date 94 103 The date that the data set was last changed.
DSBD_ALTER_CNT Int 105 109 The number of times that the data set was accessed with ALTER authority.
DSBD_CONTROL_CNT Int 111 115 The number of times that the data set was accessed with CONTROL authority.
DSBD_UPDATE_CNT Int 117 121 The number of times that the data set was accessed with UPDATE authority.
DSBD_READ_CNT Int 123 127 The number of times that the data set was accessed with READ authority.
DSBD_UACC Char 129 136 The universal access of this data set. Valid values are NONE, EXECUTE, READ, UPDATE, CONTROL, and ALTER.
DSBD_GRPDS Yes/ No 138 141 Is this a group data set?
DSBD_AUDIT_LEVEL Char 143 150 Indicates the level of resource-owner-specified auditing that is performed. Valid values are ALL, SUCCESS, FAIL, and NONE.
DSBD_GRP_ID Char 152 159 The connect group of the user who created this data set.
DSBD_DS_TYPE Char 161 168 The type of the data set. Valid values are VSAM, NONVSAM, TAPE, and MODEL.
DSBD_LEVEL Int 170 172 The level of the data set.
DSBD_DEVICE_NAME Char 174 181 The EBCDIC name of the device type on which the data set resides.
DSBD_GAUDIT_LEVEL Char 183 190 Indicates the level of auditor-specified auditing that is performed. Valid values are ALL, SUCCESS, FAIL, and NONE.
DSBD_INSTALL_DATA Char 192 446 Installation-defined data.
DSBD_AUDIT_OKQUAL Char 448 455 The resource-owner-specified successful access audit qualifier. This is set to blanks if AUDIT_LEVEL is NONE. Otherwise, it is set to either READ, UPDATE, CONTROL, or ALTER.
DSBD_AUDIT_FAQUAL Char 457 464 The resource-owner-specified failing access audit qualifier. This is set to blanks if AUDIT_LEVEL is NONE. Otherwise, it is set to either READ, UPDATE, CONTROL, or ALTER.
DSBD_GAUDIT_OKQUAL Char 466 473 The auditor-specified successful access audit qualifier. This is set to blanks if GAUDIT_LEVEL is NONE. Otherwise, it is set to either READ, UPDATE, CONTROL, or ALTER.
DSBD_GAUDIT_FAQUAL Char 475 482 The auditor-specified failing access audit qualifier. This is set to blanks if GAUDIT_LEVEL is NONE. Otherwise, it is set to either READ, UPDATE, CONTROL, or ALTER.
DSBD_WARNING Yes/ No 484 487 Does this data set have the WARNING attribute?
DSBD_SECLEVEL Int 489 491 The data set security level.
DSBD_NOTIFY_ID Char 493 500 User ID that is notified when violations occur.
DSBD_RETENTION Int 502 506 Retention period of the data set.
DSBD_ERASE Yes/ No 508 511 For a DASD data set, is this data set scratched when the data set is deleted?
DSBD_SECLABEL Char 513 520 Security label of the data set.

Data set categories record (0401)

The Data Set Categories record defines the categories to which a data set belongs. There is one record per data set/category combination.

Table 2. Data Set Categories Record.

Defines the categories with which a data set is associated.

Field Name Type Position Comments
Start End
DSCAT_RECORD_TYPE Int 1 4 Record type of the Data Set Categories record (0401).
DSCAT_NAME Char 6 49 Data set name as taken from the profile name.
DSCAT_VOL Char 51 56 Volume upon which this data set resides. Blank if the profile is generic, and *MODEL if the profile is a model profile.
DSCAT_CATEGORY Int 58 62 Category associated with this data set.

Data set conditional access record (0402)

The Data Set Conditional Access record defines the data sets that have conditional access permissions. There is one record per data set/access combination.

Table 3. Data Set Conditional Access Record.

Defines the conditional access element/user access combinations for a data set.

Field Name Type Position Comments
Start End
DSCACC_RECORD_TYPE Int 1 4 Record type of the Data Set Conditional Access record (0402).
DSCACC_NAME Char 6 49 Data set name as taken from the profile name.
DSCACC_VOL Char 51 56 Volume upon which this data set resides. Blank if the profile is generic, and *MODEL if the profile is a model profile.
DSCACC_CATYPE Char 58 65 The type of conditional access checking that is being performed. Valid values are APPCPORT, PROGRAM, CONSOLE, TERMINAL, JESINPUT, and SERVAUTH.
DSCACC_CANAME Char 67 74 The name of a conditional access element that is permitted access.
DSCACC_AUTH_ID Char 76 83 The user ID or group name that is authorized to the data set.
DSCACC_ACCESS Char 85 92 The access of the conditional access element/user combination. Valid values are NONE, EXECUTE, READ, UPDATE, CONTROL, and ALTER.
DSCACC_ACCESS_CNT Int 94 98 The number of times that the data set was accessed.
DSCACC_NET_ID Char 100 107 The network name when DSCACC_CATYPE is APPCPORT.
DSCACC_CACRITERIA Char 109 352 The IP name when DSCACC_CATYPE is SERVAUTH.

Data set volumes record (0403)

The Data Set Volumes record defines the volumes upon which a data set resides. There is one record per data set/volume combination. Records exist in this table only for discrete data set profiles.

Table 4. Data Set Volumes Record.

Defines the volumes upon which a data set resides.

Field Name Type Position Comments
Start End
DSVOL_RECORD_TYPE Int 1 4 Record type of the Data Set Volumes record (0403).
DSVOL_NAME Char 6 49 Data set name as taken from the profile name.
DSVOL_VOL Char 51 56 Volume upon which this data set resides.
DSVOL_VOL_NAME Char 58 63 A volume upon which the data set resides.

Data set access record (0404)

The Data Set Access record defines the users or groups that are allowed to access data. There is one record per data set/authorization combination.

Table 5. Data Set Access Record.

Defines the authorizations and access counts for data sets

Field Name Type Position Comments
Start End
DSACC_RECORD_TYPE Int 1 4 Record type of the Data Set Access Record (0404).
DSACC_NAME Char 6 49 Data set name as taken from the profile name.
DSACC_VOL Char 51 56 Volume upon which this data set resides. Blank if the profile is generic, and *MODEL if the profile is a model profile.
DSACC_AUTH_ID Char 58 65 The user ID or group name that is authorized to the data set.
DSACC_ACCESS Char 67 74 The access allowed to the user. Valid values are NONE, EXECUTE, READ, UPDATE, CONTROL, and ALTER.
DSACC_ACCESS_CNT Int 76 80 The number of times that the data set was accessed.

Data set installation data record (0405)

The Data Set Installation Data record defines the user data that is associated with a data set profile. There is one record per data set/installation data combination.

This record type contains the data stored in the USRCNT repeat group, which is a field in the RACF® database that is reserved for your installation's use. None of the RACF commands manipulate this field. Do not confuse this field with the DSBD_INSTALL_DATA field, shown in Table 1, which you enter into the database using the ADDSD and ALTDSD commands.

Table 6. Data Set Installation Data Record.

Defines the user-specified information associated with a data set.

Field Name Type Position Comments
Start End
DSINSTD_RECORD_TYPE Int 1 4 Record type of the Data Set Installation Data Record (0405).
DSINSTD_NAME Char 6 49 Data set name as taken from the profile name.
DSINSTD_VOL Char 51 56 Volume upon which this data set resides. Blank if the profile is generic, and *MODEL if the profile is a model profile.
DSINSTD_USR_NAME Char 58 65 The name of the installation-defined field.
DSINSTD_USR_DATA Char 67 321 The data for the installation-defined field.
DSINSTD_USR_FLAG Char 323 330 The flag for the installation-defined field in the form X<cc>.

Data set DFP data record (0410)

The Data Set DFP Data record defines the DFP information required by the System Managed Storage (SMS) facility of the Data Facility Product (DFP). There is one record per data set/DFP data combination.

Table 7. Data Set DFP Data Record.

Defines the SMS Data that is associated with a data set

Field Name Type Position Comments
Start End
DSDFP_RECORD_TYPE Int 1 4 Record type of the Data Set DFP Data record (0410).
DSDFP_NAME Char 6 49 Data set name as taken from the profile name.
DSDFP_VOL Char 51 56 Volume upon which this data set resides. Blank if the profile is generic, and *MODEL if the profile is a model profile.
DSDFP_RESOWNER_ID Char 58 65 The resource owner of the data set.

Data set TME role record (0421)

The Data Set TME role record identifies ROLE profiles and access authorities referencing the data set. There is one record per data set/role combination.

Table 8. Data Set TME Data Record.

Data Set TME Data Record

Field Name Type Position Comments
Start End
DSTME_RECORD_TYPE Int 1 4 Record type of the Data Set TME Data Record (0421).
DSTME_NAME Char 6 49 Data set name as taken from the profile name.
DSTME_VOL Char 51 56 Volume upon which this data set resides. Blank if the profile is generic, and *MODEL if the profile is a model profile.
DSTME_ROLE_NAME Char 58 303 Role profile name.
DSTME_ACCESS_AUTH Char 305 312 Access permission to this resource as defined by the role.
DSTME_COND_CLASS Char 314 321 Class name for conditional access.
DSTME_COND_PROF Char 323 568 Resource profile for conditional access.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014