SAF authority to access the CCL
When defining Export destinations, one or more administrators can set up and manage a shared list of connections. If you make the shared list available to other users, they do not have to define their own PCLs.
Users with appropriate authority can modify information in the ECL and CCL. The security administrator sets the authority levels that enable users' access to and and editing privileges for these connections. The following table displays the available authority levels and their explanations:
Authorization to edit the ECL or CCL
Level | Description |
---|---|
none | You must set up your own connections. You cannot view or edit the ECL or CCL. |
READ | You can view and select connection definitions from the ECL or CCL. |
UPDATE | You can view, edit, delete, and add connection definitions in the ECL or CCL. |
In addition, the SAF provides an interface to your security product (for example, Computer Associates ACF, eTrust CA ACF2 Security for Db2, or eTrust CA Top Secret for DB2). SAF determines who can access z/OS resources, and at what levels, by using security rules. You can use SAF to define who can read or maintain the ECL based on:
- User ID
- Product function or feature