Rules Facility Guide › Rules Reference › VMTAPE LIST SYSTEM Rule › Description

Description

With the VMTAPE LIST SYSTEM rule you can control access to tape volume information for tapes that are created on other systems in a shared TMC environment. For these rules to apply, the CJOB field in the TMC for the requested volume must be a value that does not equal a valid user ID on the local z/VM system.

CA VM:Tape requests authorization of this type only for tape volumes with CJOB values that do not have matching user IDs on the local z/VM system. If the CJOB values have matching user IDs on the local z/VM system, use the non SYSTEM VMTAPE rules to control access to those volumes.

You can control access based on volume serial number or data set name. The VMTAPE LIST SYSTEM rule is meaningful, and therefore valid, only when created in the system override and default rules files.

If the rule allowing the CA VM:Tape LIST command for SYSTEM volumes contains the LOGPASS option, the requesting user ID will be prompted for a logon password during the LIST process.

If there are no rules defined to govern a request, the authorization is done based on CA VM:Tape specific authorizations.

The NORULE record in the SECURITY CONFIG file does not apply to CA VM:Tape requests.

Examples

• You do not want any z/VM users to be able to LIST CA VM:Tape volumes that were created on other systems. Place the following rule in the SYSTEM override rules file:

  REJECT * VMTAPE LIST SYSTEM VOLUME *
  

• You want to allow user ADMIN to LIST any CA VM:Tape volumes that were created on other systems. When the command is issued, you want ADMIN to specify his logon password for verification. Place the following rule in the SYSTEM override rules file:

  ACCEPT ADMIN VMTAPE LIST SYSTEM VOLUME * (LOGPASS
  

• You need to allow the accounting group (ACIGROUP ACCNTING) to have access to z/OS data for payroll on the z/VM system. However, you also need to make sure that they do not have access to other z/OS tape volumes. You would place the following rules in the system override and system default rule files respectively:

  ACCEPT ACCNTING VMTAPE LIST SYSTEM DSN PAYROLL (GROUP
  REJECT  * VMTAPE LIST SYSTEM VOLUME *