The RACROUTE REQUEST=AUTH Call

Extending Security Through the z/OS Security Interface › The RACROUTE REQUEST=AUTH Call

The RACROUTE REQUEST=AUTH Call

The RACROUTE REQUEST=AUTH call:

Requests authorization for use of a specified resource at a specific access level
Is primarily used for data set and volume authorizations
Can be used for any resource class available using RACROUTE REQUEST=FASTAUTH

Examples: RACROUTE REQUEST=AUTH

This example defines the RACROUTE REQUEST=AUTH call to validate data set access:

RACROUTE REQUEST=AUTH,
         CLASS='DATASET',
         ENTITY=DSNAME,
         ATTR=attr‑name,     (read/update/alter)
         WORKA=WORKAREA

DSNAME   DC    CL44'SAMPLE.DATA.SET.NAME'
WORKAREA DS    XL512

This example defines the RACROUTE REQUEST=AUTH call to log data to the SMF or Audit/Tracking File:

RACROUTE REQUEST=AUTH,
         CLASS=CLASSNML,
         ENTITY=EVENT3,      (log data area)
         WORKA=RWORK

CLASSNML DC    AL1(L'CLASSNM)
CLASSNM  DC    C'USERLOG'
EVENT3   DC    AL1(21),CL21'EVENT 3 HAS COMPLETED'
RWORK    DS    XL512

Resource Class Classification

Resources are classified by Class Names. This table lists valid Class Names, their functions, and required data.

Class Name	Function	Entity
ABSTRACT	Validate access to user resource	8 character user resource name
CHGPROP	Cross‑CPU change propagation	Recovery record buffer
DASDVOL	Validate access to DASD volumes	1‑6 character volume serial
DASDVOLT	Determine if DASD volume access should be granted in any manner; RC=8 if not accessible	1‑6 character volume serial
DASDVOLXa	Access levels are: x'01' = NOCREATE x'04' = CONTROL x'08' = SCRATCH x'10' = CREATE x'20' = WRITE x'40' = READ x'0080' = INQUIRE x'0040' = SET x'FFFF' = ALL
DATASET	Validate access to a data set	44 character dsname
DATASETT	Determine if data set can be used with any access level. RC=0 is returned if any permission is found; RC=8 is returned if no permission is found.	44 character dsname
DATASETXa	Extended data set check CLASSNAME+8 contains one or two bytes access mask, “a”, that overrides the ATTR values: x'08' = SCRATCH x'10' = CREATE x'20' = WRITE x'40' = READ x'80' = FETCH x'0080' = INQUIRE x'0040' = SET x'FFFF' = ALL	44 character dsname
DUFXTR	Obtain INSTDATA for an ACID	See Dynamic Extract/Update Facility section
DUFUPD	Replace INSTDATA date	See Dynamic Extract/Update Facility section
INSTEXIT	Invoke installation exit Site call	Site‑dependent data
LOCK	Unconditionally lock a terminal to prevent access	none
TAPEVOL	Validate access to tape volume	1‑6 character volume serial
TAPEVOLT	Determine if tape volume can be used in any manner; RC=8 if not accessible	1‑6 character volume serial
TAPEVOLXa	Access levels are: x'01' = NOCREATE x'04' = CONTROL x'08' = SCRATCH x'10' = CREATE x'20' = WRITE x'40' = READ x'80' = BLP x'FF' = ALL
UNLOCK	Conditionally unlock a terminal	Password
USERLOG	Log site‑dependent data	1‑byte length field followed by up to 44 bytes of data
Any resource defined in the RDT	Installation defined resources	Length is defined in the RDT entry