A catalog that contains a VSAM data set does not have to be RACF protected for its data sets to be RACF protected.

If a user-security-verification routine (USVR) exists, it is not invoked for RACF-defined data sets.

Deleting any type of RACF-protected entry from an RACF-protected catalog requires alter-level authorization for the catalog or the entry being deleted. Alter authority for the catalog itself is not sufficient for this operation.

Note: VSAM OPEN routines bypass RACF security checking if the program issuing OPEN is in supervisor state or protection key 0.