IBM Mainframe Forum Index
 
Log In
 
IBM Mainframe Forum Index Mainframe: Search IBM Mainframe Forum: FAQ Register
 

IMS DC screen Access


IBM Mainframe Forums -> IMS DB/DC
Post new topic   Reply to topic
View previous topic :: View next topic  
Author Message
sivasaras

New User


Joined: 29 Sep 2007
Posts: 93
Location: chenna/i-

PostPosted: Fri Nov 18, 2016 6:38 pm
Reply with quote

Hi,

I have a IMS DC screen in which i want to control access only for a set of users . how to do that?

could anyone please guide me?


Thanks
siva
Back to top
View user's profile Send private message
Gary Jacek

New User


Joined: 17 Dec 2007
Posts: 64
Location: Victoria, BC, Canada

PostPosted: Sat Nov 19, 2016 2:41 am
Reply with quote

Hi Siva

I am a bit curious why you are listed as a "New User" on this list, having been resident here for more than 9 years. icon_confused.gif

An IMS DC "screen" is typically produced by an underlying IMS transaction code. It is the transaction code and associated PSB and program load modules, using database PCBs coded in the PSB that access IMS database segments and DB2 tables to produce the IMS DC "screen" output.

So you really want to protect the IMS transaction code.

Assuming your shop uses RACF for security, you will need to know what resource (transaction code) to define in what RACF Class to protect the transaction. Then you permit READ authority in RACF for the resource(transaction) in the RACF Class to give specific users the access they need to the transaction. READ is all that is needed, even if the transaction performs database updates.

How do you determine the RACF class?
You examine the startup messages from your IMS control region until you find this message:

DFS1929I * RCLASS = iprod

Whatever you see in the message where "iprod" is shown in the above message is your IMS RCLASS.

You concatenate a "T" in front of the RCLASS to obtain the RACF CLASS that protects transactions on this IMS region.

In my example, the RACF CLASS is "tiprod".

Once your RACF administrator has defined the transactions to RACF and permitted access to users, she will have to perform a refresh in RACF to activate the definitions, using the SETROPTS command, specifying the RACF CLASS.

Maida Snapper has written a number of presentations on this topic.
Here is one.



Good luck.
Back to top
View user's profile Send private message
enrico-sorichetti

Superior Member


Joined: 14 Mar 2007
Posts: 10872
Location: italy

PostPosted: Sat Nov 19, 2016 3:44 am
Reply with quote

Quote:
I am a bit curious why you are listed as a "New User" on this list, having been resident here for more than 9 years.


the classification new user / active user / senior member
depends on the number of posts. not on the membership age
Back to top
View user's profile Send private message
Gary Jacek

New User


Joined: 17 Dec 2007
Posts: 64
Location: Victoria, BC, Canada

PostPosted: Sat Nov 19, 2016 4:20 am
Reply with quote

Hi Enrico

I see that I am in the same boat. Cheers. icon_biggrin.gif
Back to top
View user's profile Send private message
View previous topic :: :: View next topic  
Post new topic   Reply to topic View Bookmarks
All times are GMT + 6 Hours
Forum Index -> IMS DB/DC

 


Similar Topics
Topic Forum Replies
No new posts Access to non cataloged VSAM file JCL & VSAM 18
No new posts How to access web services/website? Mainframe Interview Questions 4
No new posts access the last host command CLIST & REXX 2
No new posts CICS Access to RACF CICS 2
No new posts Access library name in REXX CLIST & REXX 6
Search our Forums:

Back to Top