Customizing RACF for Alternate Access APPL access
For RACF support of
Alternate Access
application access authorization through the APPL parameter in the RACROUTE VERIFY parameter list or through the VTAM major node name, review the following steps and perform any actions that are necessary for your site:
Define the profile BBVLOGON in class APPL to RACF:
RDEFINE APPL (BBVLOGON) UACC(NONE)If EXCP terminal sessions are to be used with Alternate Access, also define the profile BBVEXCP in class APPL to RACF:
RDEFINE APPL (BBVEXCP) UACC(NONE)Define a profile to RACF in class APPL for each VTAM major node name that is to be used with Alternate Access:
RDEFINE APPL (node-name) UACC(NONE)Permit each user ID that needs to log on to Alternate Access to have READ access to the BBVLOGON resource in class APPL:
PERMIT BBVLOGON CLASS(APPL) ID(userID) ACCESS(READ)Permit each user ID that needs to log on to Alternate Access by using an EXCP session to have READ access to the BBVEXCP resource in class APPL:
PERMIT BBVEXCP CLASS(APPL) ID(userID) ACCESS(READ)Permit each user ID that needs to log on to Alternate Access by using a VTAM terminal to have READ access to the profile in class APPL whose name matches the major node name:
PERMIT
node-name
CLASS(APPL) ID(userID) ACCESS(READ)To ensure that the access list is correct and complete, list the profiles:RLIST APPL BBVLOGON ALL
RLIST APPL BBVEXCP ALL
RLIST APPL node-name ALL
- If necessary, activate the APPL resource class:SETROPTS CLASSACT(APPL)
- If necessary, refresh the in-storage RACLIST profiles for the APPL class:SETROPTS REFRESH RACLIST(APPL)
Related topic