Mauri Kanter wrote: >We are getting closer ... Seems MVSADMIN.XCF.CFRM is related to the ability to define something in the CFRM dataset ...
>I need to understand how to protect IXCCREAT There is nothing about SAF or RACF for that macro IXCCREAT or the XCF group described. Not every IXC* macros have a paragraph about SAF protection according to the same book I mentioned earlier. (I could have missed something while RTFM...) It seemed to me the USAGE of the services are somewhat protected. What you can try, enable logging for all access attempts for RACF class FACILITY, maybe on a test system, put in a temporary backstop profile ** with WARNING on. Then you can search the SYSLOG or SMF for any clues. Maybe you'll discover a profile used by that macro. Remember to remove that backstop profile. Or write your own RACROUTE service. HTH! Groete / Greetings Elardus Engelbrecht ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html

