Protection-Mode Indicator

You can set the protection-mode indicator (third data byte) in the password record to one of the following values:

X'00' to indicate that the password is a secondary password and the protected data set is to be read only (PWREAD).
X'80' to indicate that the password is the control password and the protected data set is to be read only (PWREAD).
X'01' to indicate that the password is a secondary password and the protected data set is to be read and written (PWREAD/PWWRITE).
X'81' to indicate that the password is the control password and the protected data set is to be read and written (PWREAD/PWWRITE).

The checking sequence for the protection status of a data set produces the following defaults:

If control password is:             Secondary password must be:

1.  PWREAD/PWWRITE or            PWREAD/PWWRITE or
    PWREAD/NOWRITE              PWREAD/NOWRITE

2.  NOPWREAD/PWWRITE            NOPWREAD/PWWRITE

If the control password is set to either of the settings in item 1 and you try to set the secondary password to NOPWREAD/PWWRITE, the secondary password reverts to PWREAD/PWWRITE.

If the control password is changed from either of the settings in item 1 to the setting in item 2, the secondary password is reset to NOPWREAD/PWWRITE.

If the control password is changed from the setting in item 2 to a setting in item 1, the secondary password is set to PWREAD/PWWRITE.

Because the DSCB of the protected data set is updated only when the control password is changed, protection attributes for secondary passwords might conflict with the protection attributes of the control password.