DFSMSdfp: Define a security product profile for IDCAMS DCOLLECT exit
Description
The EXITNAME parameter of the IDCAMS DCOLLECT command allows you to specify an exit to receive control during DCOLLECT processing. After applying the PTF for APAR OA46062 (which was shipped for z/OS V2R1 and V1R13), you must ensure that the exit name is protected through a FACILITY class profile, and that callers of the exit have the appropriate authorization.
Table 1 provides more details about this migration action. Use this information to plan your changes to the system.
| Element or feature: | DFSMSdfp. |
|---|---|
| When change was introduced: | z/OS V2R1 and z/OS V1R13, both with APAR OA46062 applied. |
| Applies to migration from: | z/OS V2R1 and z/OS V1R13, both without APAR OA46062 applied. |
| Timing: | After the first IPL of z/OS V2R2. |
| Is the migration action required? | Yes, if your installation uses the EXITNAME parameter on the IDCAMS DCOLLECT command. |
| Target system hardware requirements: | None. |
| Target system software requirements: | None. |
| Other system (coexistence or fallback) requirements: | None. |
| Restrictions: | None. |
| System impacts: | If a caller attempts to invoke the exit without the proper authorization, the DCOLLECT command fails with the error message: IDC31811I INSUFFICIENT FACILITY CLASS AUTHORIZATION TO INVOKE exitname |
| Related IBM® Health Checker for z/OS® check: | None. |
Steps to take
Follow these steps:
- Define a FACILITY class profile with resource name
STGADMIN.IDC.DCOLLLECT.exitname, where exitname is
the DCOLLECT EXITNAME parameter value.
If the EXITNAME parameter is not specified, the default name is IDCDCX1. You do not require a FACILITY class profile for the default name IDCDCX1.
- Ensure that callers of the exit have at least READ authority to the FACILITY class resource name. If callers have READ authority to one of the FACILITY class profiles STGADMIN.**, STGADMIN.IDC.**, and STGADMIN.IDC.DCOLLECT.*, no action is needed.
Reference information
For more information, see z/OS DFSMS Access Method Services Commands.