CA-L-Serv Configuration Tasks › Update External Security for CA-L-Serv › How the Update Tasks are accomplished › Implement Security with CA ACF2

Implement Security with CA ACF2

The following are sample definitions for users running under CA ACF2. The actual implementation in your environment may differ from these templates.

• CLASMAP the new $LSRVDSN resource class to resource type LSV.

  For example:

  SET CONTROL(GSO)
  INSERT CLASMAP.LSRV2 ENTITYLN(44)‑
         RESOURCE($LSRVDSN) RSRCTYPE(LSV)
  

  Issue a MODIFY command from the console:

  F ACF2,REFRESH(CLASMAP)
  

• Protect your data sets using the $LSRVDSN resource class.

  Create resource rules for the data sets that are under the control of CA‑L‑Serv:

  SET RESOURCE(LSV)
  COMPILE
  .$KEY(prefix1) TYPE(LSV)
  .UID(*************userid1) SERVICE(DELETE) ALLOW
  .UID(*************userid2) SERVICE(DELETE) ALLOW
  .<blank character>
  STORE
  

  Optionally, you can define a pseudo data set of 'ALL' to represent all the data sets under CA‑L‑Serv control:

  SET RESOURCE(LSV)
  COMPILE
  .$KEY(ALL) TYPE(LSV)
  .UID(*************userid1) SERVICE(DELETE) ALLOW
  .UID(*************userid2) SERVICE(DELETE) ALLOW
  .<blank character>
  STORE
  

• Create or modify access rules for relevant data sets to give CA‑L‑Serv the required access.

  SET RULE
  COMPILE
  .$KEY(prefix1)
  .$MODE(ABORT)
  .qualifier.qualifier UID(*************LSERV) WRITE(A)
  .<blank character>
  STORE
  
  COMPILE
  .$KEY(prefix2)
  .$MODE(ABORT)
  .qualifier.qualifier UID(*************LSERV) WRITE(A)
  .<blank character>
  STORE