PH55647: ENHANCEMENTS OF SECURITY AND IMS REGISTRATION

Obtain the fix for this APAR.

APAR status

• Closed as new function.

Error description

• This APAR enables IMS Administration Tool to add the following
  new enhancements:
  - More granularity of security
  - Register optional DBD, PSB, and ACB libraries using RECON ID
  of IMS Tools Base
  
  In addition, this APAR modifies some defects.
  

Local fix

Problem summary

• ****************************************************************
  * USERS AFFECTED: Users of IBM IMS Administration Tool for     *
  *                 z/OS (FMID=HALC110)                          *
  ****************************************************************
  * PROBLEM DESCRIPTION: This is an enhancement to the IMS       *
  *                      Administration Tool and includes        *
  *                      several defect fixes and improvements.  *
  ****************************************************************
  * RECOMMENDATION: Apply the maintenance for this APAR.         *
  ****************************************************************
  This APAR provides following features.
  
  1.Ability to classify users into two types, super administrators
    and regular users, by using Security Authorization Facility
    (SAF).
   - Classifying users is optional.
   - If users are classified,
     - Only super administrators can define and change scope
       designations of products and systems.
     - Only super administrators can configure settings from the
       Setup and Administration menu.
   - This APAR relaxes the permission required to change the
     options for the record DBD/PSB statements function from
     UPDATE to READ, allowing super administrators to change the
     options. Users with UPDATE authority do not need to be
     changed to READ authority.
  
  2.Ability to define DBD libraries, PSB libraries, and ACB
    libraries for IMS data sharing groups of IMS Administration
    Tool.
   - DBD, PSB, and ACB libraries can be defined only through the
     ISPF interface.
   - When DBD, PSB, and ACB libraries are defined, information
     about defined libraries is stored to IMS Tools Knowledge
     Base as RECON ID.
   - Data set information that is stored in RECON ID is used
     during the DBDGEN, PSBGEN, ACBGEN, and catalog populate
     processes of the IMS resource change function and the import
     objects function.
   - Information in RECON ID is also shared with IMS Tools Base
     and IMS Administration Foundation. To use these function,
     the following APAR/PTF must be applied:
      - The PTF of APAR PH55736 to IMS Tools Base 1.7.
      - If you are using IMS Administration Foundation, The PTF
        of APAR PH56865 to IBM Unified Management Server.
  
  3.Fixes for the following defect.
   - NEXT and PF8 are not working in Object Explorer when screen
     size is 24x80.
   - IMSID lists are different between Source and Target at
     Compare IMS Directories and Compare IMS Directory and IMS
     Catalog.
   - Incorrect vv.rr.mm is displayed in Product Management.
   - IMSIDs cannot be displayed at Register IMS Systems because
     of unnecessary RECON access.
   - When IMS-managed ACBs is enabled, unneeded IMSACBA and
     IMSACBB DDs are generated in a JCL which is built by Import
     Objects.
   - ATY3704I message is issued multiple times.
  
  For details on 1 and 2, see the latest IMS Administration Tool
  User's Guide.
  
  
  ========================
  = DOCUMENTATION CHANGE =
  ========================
  IMS Administration Tool for z/OS Version 1 Release 1 User's
  Guide and Reference (SC27-9011) is updated.
  Refer to topic "What's new in IMS Administration Tool"
  (https://www.ibm.com/docs/en/ims-admintool/1.1?topic=overview
  -whats-new-in-ims-administration-tool) in IBM Documentation
  for doc changes associated with this APAR.
  

Problem conclusion

Temporary fix

Comments

• If RECON data sets of your IMS is registered to a RECON ID and
  DBDLIB, PSBLIB, and ACBLIB are registered in the RECON ID, IMS
  Administration Tool discovers the data sets from the RECON ID.
  Therefore, register the data sets that are used by IMS
  Administration Tool in the RECON ID. However, if you need to
  use different data sets between IMS Administration Tool and IMS
  Tools Base, register the data sets in "Manage Data Sets and
  Groups" function of IMS Administration Tool.
  

APAR Information

• APAR is sysrouted FROM one or more of the following:

• APAR is sysrouted TO one or more of the following:

  UI93612

Modules/Macros

• ATY#AUD  ATY#BCOM ATY#BDIR ATY#BRGN ATY#CLNT ATY#DISC ATY#DRCT
  ATY#EMSG ATY#IDEF ATY#ITBR ATY#SAF  ATY$A000 ATY$A100 ATY$AAUD
  ATY$AGRP ATY$APRQ ATY$ARCI ATY$B000 ATY$BADM ATY$BCMP ATY$BSET
  ATY$C000 ATY$CJOB ATY$EXPD ATY$GDBD ATY$GVAR ATY$IMSI ATY$J5S0
  ATY$JC02 ATY$JC03 ATY$JCL  ATY$LDBD ATY$LDSN ATY$LOAD ATY$LPSB
  ATY$M5S0 ATY$MEXP ATY$MSET ATY$TBCR ATY$VBKP ATY$VELG ATY@CFG
  ATY@GRP  ATY@ICMD ATY@IMSI ATY@IOPT ATY@MOD1 ATY@OBJU ATY@OPT
  ATY@PROD ATY@SSID ATYA00   ATYC00   ATYHA1S1 ATYHA200 ATYHA2C1
  ATYHA2C2 ATYHA2P1 ATYHA2R1 ATYHA2R2 ATYHA2R3 ATYHA2S1 ATYHA5C1
  ATYHA5L1 ATYHB010 ATYHBLGF ATYHC000 ATYHC1D1 ATYHC2C1 ATYHCGLB
  ATYHCJLS ATYHCJOB ATYHJ000 ATYHJ5S0 ATYHM1R2 ATYHM1R3 ATYLINK
  ATYPA100 ATYPA1S1 ATYPA200 ATYPA2C1 ATYPA2C2 ATYPA2P1 ATYPA2R1
  ATYPA2R2 ATYPA2R3 ATYPA2S1 ATYPA5C1 ATYPA5L1 ATYPB010 ATYPB309
  ATYPBLGF ATYPC000 ATYPC1D1 ATYPC2C1 ATYPCGLB ATYPCJLS ATYPCJOB
  ATYPJ000 ATYPJ5S0
  

Fix information

• Fixed component name

  IMS ADMIN TOOL

• Fixed component ID

  5655CAT00

Applicable component levels

• R110 PSY UI93612

     UP23/09/23 P F309  

Fix is available

• Select the PTF appropriate for your component level. You will be required to sign in. Distribution on physical media is not available in all countries.