I implemented read-only volumes using RACF for a site when I was free-lancing a few years back.
It involved setting up a FACILITY class profile of something like "@SYSVOL.volser" and then writing a very simple ICHRCX02 exit. The exit only had to get involved when DATASET access was granted by RACF and by that stage the RCXVSER field was populated with the volser. We used to to protect system software packs in a shared-SYSRES environment. Admittedly the exit only got involved for DATASET class access requests - so it was probably not all-encompassing - but it did the job that the customer was after. Rob Scott Rocket Software http://www.rs.com/portfolio/mxi/ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
