Supervisor state or problem state Any PSW-key
mask (PKM)
Programs require appropriate SAF (System Authorization
Facility) authorization to the FACILITY class resource IXCNOTE. owner. application when
creating, deleting, or querying a note pad, and when creating a connection
to a note pad. The owner and application are
derived from the note pad name. - To create or delete a note pad, the program must have CONTROL
access.
- To query a note pad, the program must have READ access.
- To create a connection to a note pad that can be used to create,
read, write, replace, or delete notes, the program must have UPDATE
access.
- To create a connection to a note pad that can only read notes,
the program must have READ access.
A program that uses a connection must be recognized by
XCF as a valid user of the connection. Each applicable request documents
the conditions under which a program is deemed to be a valid user.
If the program is not recognized as a valid user, XCF might perform
a SAF check to verify that the user has the authority appropriate
for the request.
Note that all SAF checking is performed against
the security environment of the work unit. For a task that has a task
specific security environment, the Access Control Environment Element
(ACEE) anchored at offset TCBSENV in the TCB (macro IKJTCB) is used.
For an SRB, or a task for which TCBSENV is zero, the ACEE anchored
at offset ASXBSENV in the ASXB (macro IHAASXB) for the home address
space is used.
If
SAF is not available, or if there is no IXCNOTE.owner.application resource
defined for the note pad in the FACILITY class, a request to create,
delete, query, or connect to a note pad is rejected if the program
is running in problem state with a PKM allowing key 8-15 (IXCNOTERSNNOSECPROFILE).
Such requests are accepted if the program is running in supervisor
state or with a PKM allowing key 0-7. However, note that the program
will need to run in supervisor state or with a PKM allowing key 0-7
when using a connection that was created under these circumstances.
Any
program that specifies USAGE=SERVER or USAGE=CLIENT when creating
a connection to a note pad must be running in supervisor state or
with a PKM allowing key 0-7.
|