z/OS Security Server RACROUTE Macro Reference
Previous topic | Next topic | Contents | Contact z/OS | Library | PDF


RACLIST (standard form)

z/OS Security Server RACROUTE Macro Reference
SA23-2294-00

The standard form of the RACLIST macro is written as follows:

   
   name name: Symbol. Begin name in column 1.
   
One or more blanks must precede RACLIST.
   
RACLIST  
   
One or more blanks must follow RACLIST.
   
CLASS=‘class name’ class name: 1–8 character class name
CLASS=class name addr class name addr: A-type address or register (2) – (12)
   
    ,LIST=list addr list addr: A-type address or register (2) – (12)
   
    ,ACEE=acee addr acee addr: A-type address or register (2) – (12)
   
    ,INSTLN=parm list addr parm list addr: A-type address or register (2) – (12)
   
    ,APPL=‘applname’ applname: 1–8 character name
    ,APPL=applname addr applname addr: A-type address or register (2) – (12)
   
    ,SUBPOOL=(sub#1,sub#2) sub#1,sub#2: Decimal digit 0–255.
   
    ,ENVIR=CREATE Default: ENVIR=CREATE
    ,ENVIR=DELETE  
   
    ,OWNER=YES  
    ,OWNER=NO Default: OWNER=NO
The parameters are explained as follows:
CLASS=‘class name
CLASS=class name addr
specifies that RACLIST is to build an in-storage profile for the resources of the specified class. If an address is specified, the address must point to an 8-byte field containing the class name, left-justified and padded with blanks if necessary.

The class name must be a valid, active class as defined in the class descriptor table. It must also be a member class. If the member class has a grouping class associated with it, RACF® utilizes both the member and the grouping class when building the in-storage profiles.

,LIST=addr
specifies the address of a list of resource names for which RACLIST is to build the in-storage profiles. The list consists of a 2-byte field containing the number of the names in the list, followed by one or more variable-length names. Each name consists of a 1-byte length field, which is the length of the name, followed by the name. A zero in the 2-byte field causes the operand to be omitted. If LIST= is omitted, in-storage profiles are built for all the profiles defined to RACF in the given class as well as each member for a resource grouping associated with the specified class.
Note: This operand can be specified only with ENVIR=CREATE. If ENVIR=DELETE is specified, the RACLIST macro issues a return code of 18.
,ACEE=acee addr
specifies the address of the ACEE. The ACEE points to the in-storage profiles. If an ACEE is not specified, RACF uses the TASK ACEE pointer in the extended TCB called the TCBSENV. Otherwise, or if the TASK ACEE pointer is zero, RACF uses the main ACEE to obtain the list of the in-storage profiles. The main ACEE is pointed to by the ASXBSENV field of the address-space extension block. If an ACEE is not specified and there is no main ACEE, the in-storage profiles are not constructed.
,INSTLN=parm list addr
specifies the address of an area that contains parameter information for the RACLIST installation exit. The address is passed to the installation exit when the RACLIST routine gives control to the exit. An application or an installation program can use the INSTLN parameter to pass information to the RACLIST installation exit.
,APPL=‘applname
,APPL=applname addr
specifies the name of the application requesting the authorization checking. This information is not used for the authorization-checking process but is made available to the installation exit or exits. If an address is specified, it should point to an 8-byte area containing the application name, left justified and padded with blanks if necessary.
,SUBPOOL=(sub#1,sub#2)
specifies the subpool numbers of the storage into which the components of the in-storage profiles are to be built. sub#1 represents the subpool of the profile index. sub#2 represents the subpool of the profile proper. If the subpools are not specified they default to subpool 255. Registers can be used to specify sub#1 and sub#2. In that case, the least significant byte in the register is the subpool value.
,ENVIR=CREATE
,ENVIR=DELETE
specifies the action to be performed by the RACLIST macro.
  • CREATE: In-storage profiles for the specified class are to be built. The RACLIST function issues a return code of 18, if an in-storage list currently exists for the specified class.
  • DELETE: The in-storage profiles for the specified class are to be freed. If class is not specified, the in-storage profiles for all classes are freed.
Note: It is the responsibility of the user issuing the RACLIST macro to assure that no multitasking that results in the issuing of a RACHECK, FRACHECK, RACINIT, or RACLIST macro occurs at the same time that the RACLIST occurs.
,OWNER=YES
,OWNER=NO
specifies that the resource owner is to be placed in the profile access list with the ALTER authority. If the OWNER= operand is omitted, the default is NO.

Go to the previous page Go to the next page




Copyright IBM Corporation 1990, 2014