On Wed, 26 Sep 2007 09:03:29 -0500, Chase, John <[EMAIL PROTECTED]> wrote:
>With RACF, I *think* you can accomplish that with the PROGRAM class, but
>I must first warn you that the more I learn about "program control", the
>less I understand about it.
>
>That said, you might try something like this:
>
>RDEFINE PROGRAM DFH* UACC(READ)
>RALTER PROGRAM DFH* ADDMEM('hlq.CICS.SDFHAUTH'//NOPADCHK)
>RALTER PROGRAM DFH* ADDMEM('hlq.CICS.SDFHLOAD'//NOPADCHK)
><etc. for any other relevant libraries>
>SETROPTS WHEN(PROGRAM) REFRESHNo; that won't work. That can (with UACC(NONE) rather than READ) stop users from running the specific copies of the programs in the libraries you specify. However, it will not stop users from running DFH* programs that reside in other libraries. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
