User Exits › Control File Maintenance Utility Security Interface › How the User Security Exit Works

How the User Security Exit Works

The User Security Exit is invoked for each access the Utility makes on any compression profile contained in the Control File. The exit can allow, disallow, or make no access determination. In addition, the exit can change the data set name and the requested access level, to be used by the CA Compress Security Interface for access determination. If the exit makes no access determination, or if the exit does not exist, the installation's access control facility is invoked through the System Authorization Facility (SAF) interface. If your installation's access control facility does not support SAF, then the exit must make a determination or the access is allowed.

The access already defined within your access control facility automatically determines a user's level of access. If you are attempting to ADD or DELETE a Control File entry, you need authority that corresponds to RACF's ALTER access. To issue an ALTER for a Control File entry, you need UPDATE access. To report on an entry, you need at least READ access. These levels of access can be modified by the user exit.