System Programmer Reference › User Exits › Restore Authorization (VMBEXIT3) User Exit › Comprehensive Exit

Comprehensive Exit

When a restore authorizations user exit is implemented, it is called for all end-user restores. Therefore, VMBEXIT3 must be coded to handle all six keywords. This applies even if you do not want to use all of the authorization checks; for example, you may only want to use the FORDATE check. The user exit must be coded to handle every keyword.

The following coding methods can be used in the user exit to ignore keyword authorization checks. When the user exit is coded with one or more of these methods, CA VM:Backup restore processing appears as if the user exit does not exist.

• If you do not want to use the FORUSER, FORDISK, or FORDIR authorization checks:
  • If the requesting user is the same as the source user (requester = suserid), grant authorization with a return code of 0.
  • If the requesting user is not the same as the source user (requester 0 suserid), deny authorization with a return code of 4.
• If you do not want to use the FORDATE authorization check, return the dates passed to the user exit.
• If you do not want to use the TODIR authorization checks for SFS directories or the TODISK authorization checks:
  • If the requesting user is the same as the target user (requester = tuserid), grant authorization with a return code of 0.
  • If the requesting user is not the same as the target user, (requester 0 tuserid), deny authorization with a return code of 4.