Implementing Security for CA Roscoe › Data Set Security through ZAP, IMPORT, and EXPORT

Data Set Security through ZAP, IMPORT, and EXPORT

The function of these monitors (ZAP, IMPORT, and EXPORT) are validated on a data set access basis. The following access level authorizations are required for the user to use the particular functions:

• ZAP with REP or SETSSI requires UPDATE; otherwise READ authorization is required.
• IMPORT requires READ authorization.
• EXPORT requires UPDATE authorization.

Note: Anytime a user accesses an MVS data set the DSAEXIT, if present, is invoked. The DSAEXIT, in turn, issues a duplicate RACHECK, which validates access to a data set for the purpose of returning CA Top Secret messages.