z/OS V1R6.0 DFSMS Access Method Services for Catalogs

Security AuthorizationsTable 6. Required Security Authorization for VSAM Data Sets (continued)Function PerformedRequired RACF for DataSetRequired RACF forCatalogCommentsVerify Alter Not applicable The subject data set isopened for outputprocessingNotes:1. Alter is an ″OR″ function. Either alter to the data set or alter to the catalog is required, but not both.2. Authorization is always to the cluster name for VSAM components cataloged with the integrated catalog facility.Integrated catalog facility does not check for individual component names such as data, index, path, or alternateindex.3. No authority is required to the catalog for the define of SMS-managed data sets unless the catalog is the mastercatalog. Update authority is required if the catalog is a master catalog.4. Delete is an “OR” function for both non-SMS- and SMS-managed data sets. Either alter authority to the data setor alter authority to the catalog is required to delete the data set, but not both.Note: If no profile exists for a data set, then the user is considered authorized. The catalog profile is not checked,even if it exists.Table 7. Required Security Authorization for Non-VSAM Data SetsFunction PerformedRequired RACF for DataSetRequired RACF forCatalogCommentsAlter Non-VSAM Alter None v The same authorizationapplies to both non-SMSand SMS.v See note 1.Define Alias of aNon-VSAMDefine Alias of a SMSNon-VSAMNoneNoneUpdateDefine GDG Alter Update Although a GDG is notSMS, these authorities stillapply if the catalog is SMS.NoneDefine GDS Alter Update See note 2.Define GDS SMS Alter None See note 2.Define Non-VSAMNon-SMSDefine Non-VSAMRecatalog Non-SMSAlter Update See note 3.AlterUpdateDefine Non-VSAM SMS Alter None Master catalog requiresupdate authority.Define Non-VSAMRecatalog SMSDelete Alias of aNon-VSAMAlterUpdateAlter Alter See note 4.Delete GDG Alter Alter Alter authorization eitherto the data set or to thecatalog is sufficient.Delete Non-VSAM Scratchnon-SMSAlter Alter See notes 4 and 6.Appendix A. Security Authorization Levels 353