Creating access controls by function and RECON name

Another access control policy is to restrict access by a combination of IMS RECON and function.

You must create the following SAF resources for each RECON name:

  • BBM.SDBA.IMSDB.%recon_name%.ENV
  • BBM.SDBA.IMSDB.%recon_name%.DBG
  • BBM.SDBA.IMSDB.%recon_name%.SVL
  • BBM.SDBA.IMSDB.%recon_name%.SCD
  • BBM.SDBA.IMSDB.%recon_name%.SUB
  • BBM.SDBA.IMSDB.%recon_name%.SPL
  • BBM.SDBA.IMSDB.%recon_name%.TSH
  • BBM.SDBA.IMSDB.%recon_name%.RMO

%recon_name% is the RECON name.

Example

This example shows how to restrict access to submit and threshold functions for test RECONs.

Use the following SAF resources:

  • BBM.SDBA.IMSDB.TEST*.TSH
  • BBM.SDBA.IMSDB.TEST*.SUB

Use the following RACF control cards:

PERMIT BBM.SDBA.ISMDB.TEST*.TSH CLASS(FACILITY)+
           ID(USER00) ACCESS(NONE)
PERMIT BBM.SDBA.ISMDB.TEST*.SUB CLASS(FACILITY)+
           ID(USER00) ACCESS(NONE)

Related topic

Creating-SAF-resources


 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*