CA-L-Serv Configuration Tasks › Update External Security for CA-L-Serv › How the Update Tasks are Accomplished › Implement Security with CA ACF2

Implement Security with CA ACF2

The following sample definitions are for users running under CA ACF2.

• CLASMAP the new $LSRVDSN resource class to resource type LSV.

  For example:

  SET CONTROL(GSO)
  INSERT CLASMAP.LSRV2 ENTITYLN(44)‑
         RESOURCE($LSRVDSN) RSRCTYPE(LSV)
  

  Issue a MODIFY command from the console:

  F ACF2,REFRESH(CLASMAP)
  

• Protect your data sets using the $LSRVDSN resource class.

  Create resource rules for the data sets that are under the control of CA‑L‑Serv:

  SET RESOURCE(LSV)
  COMPILE
  .$KEY(prefix1) TYPE(LSV)
  .UID(*************userid1) SERVICE(DELETE) ALLOW
  .UID(*************userid2) SERVICE(DELETE) ALLOW
  .<blank character>
  STORE
  

  Optionally, you can define a pseudo data set of 'ALL' to represent all the data sets under CA‑L‑Serv control:

  SET RESOURCE(LSV)
  COMPILE
  .$KEY(ALL) TYPE(LSV)
  .UID(*************userid1) SERVICE(DELETE) ALLOW
  .UID(*************userid2) SERVICE(DELETE) ALLOW
  .<blank character>
  STORE
  

• Create or modify access rules for relevant data sets to give CA‑L‑Serv the required access.

  SET RULE
  COMPILE
  .$KEY(prefix1)
  .$MODE(ABORT)
  .qualifier.qualifier UID(*************LSERV) WRITE(A)
  .<blank character>
  STORE
  
  COMPILE
  .$KEY(prefix2)
  .$MODE(ABORT)
  .qualifier.qualifier UID(*************LSERV) WRITE(A)
  .<blank character>
  STORE