Specifying authorized commands and programs

The lists in APFCTABL, APFPTABL, and APFTTABL must contain the names of commands or programs, up to eight characters in length. Entries of less than eight characters must be left-justified and padded to the right with blanks. You can reserve extra space by adding blank strings at the end of the list. The system ignores entries following a blank string.

You can replace the IBM-supplied modules IKJEFTE2, IKJEFTE8, and IKJEFTAP by link-editing installation-supplied modules with these names into load module IKJTABLS in SYS1.LPALIB. Specify RMODE(24) when link-editing IKJTABLS. Consult the output from stage 1 for correct link-edit information. Any program that depends on a job step environment such as the TMP should not be placed in the lists.

The following example shows how to include the list of authorized commands in IKJEFTE2.

         ENTRY APFCTABL
IKJEFTE2 CSECT
         DC    C'IKJEFTE2'     MODULE NAME
         DC    C'76.152  '     RELEASE LEVEL
APFCTABL DS    0D              ALIGNMENT
         DC    C'RECEIVE '
         DC    C'TRANSMIT'
         DC    C'XMIT    '     NOTICE IT IS PADDED WITH BLANKS
         DC    C'SYNC    '
         DC    C'RACONVRT'
         DC    C'LISTB   '
         DC    C'LISTBC  '
         DC    C'CONSPROF'
         DC    C'SEND    '
         DC    C'SE      '
         DC    C'TESTAUTH'
         DC    C'TESTA   '
         DC    C'PARMLIB '
         DC    C'        '     TERMINATOR
        END

CSECT IKJEFTE8 of load module IKJTABLS contains a list of programs invoked as authorized programs through the CALL command processor.

If you wanted to allow authorized access to PROGRAMX through CALL, then the list might look as follows.

           ENTRY     APFPTABL
IKJEFTE8   CSECT
           DC        CL8'IKJEFTE8'     MODULE NAME
           DC        CL8'85.092  '     RELEASE LEVEL
APFPTABL   DS        0D                ALIGNMENT
           DC        CL8'PROGRAMX'
           DC        CL8'        '
           END

CSECT IKJEFTAP of load module IKJTABLS contains a list of program names that the TSO/E service facility attaches as authorized programs.
If you wanted to allow access to PROGRAMX through the TSO/E service facility, then the list might look like the following.
```
           ENTRY     APFTTABL
IKJEFTAP   CSECT
           DC        CL8'IKJEFTAP'     MODULE NAME
           DC        CL8'86.120  '     RELEASE LEVEL
APFTTABL   DS        0D                ALIGNMENT
           DC        CL8'IKJEFF76'     REQUIRED FOR FIB COMMANDS
           DC        CL8'PROGRAMX'
           DC        CL8'        '
           END
```
Note: Table IKJEFTAP must include the module name IKJEFF76 for the SUBMIT, OUTPUT, STATUS, and CANCEL commands to work properly.