Use the USERSECR user exit to provide site-defined security control with CA VM:Tape. The exit examines a request, and then permits or denies access on the basis of the request and the site-defined EDITDEF field values. Use this volume access control with CA VM:Tape authorization control, or to override CA VM:Tape authorization control. For more information about site-defined fields, see EDITDEF Record.
The exit lets you implement a hierarchical tape security facility using a site-defined EDITDEF field in the TMC and this exit. This gives you flexibility in command authorization. For example, users without TAPELIBR authorization can use the EDIT command as the USERSECR exit dictates. Non-owners of tapes can use the CATALOG command to alter TMC fields or the LIST command to display tape information if authorized by the USERSECR exit.
The exit must be written in assembler and should be reusable each time it is called.
|
Copyright © 2013 CA.
All rights reserved.
|
|