RACF definitions

Overview

Beta product resources are defined to RACF in user resource class $BETA. This class is defined in the security exit and can be changed (field RACFCLAS) if necessary.

Format of the profile

B04.ssid.functiongroup.function

where:

B04	= fixed value
ssid	= subsystem ID of the started task to be protected
functiongroup	= function group (see the assignment table below)
function	= BSA Service Manager function (see the assignment table below)

The functions are permanently associated with the function codes in the user exit. These assignments must not be changed.

Assignment table

The following table shows the assignment of BSA functions to their function codes and online options:

Option	Description	Function group	Function	Access	Function code
1	PARM
1.1	Keywords	LST	KWDLST	READ	1
		LST	KWDUPDT	UPDATE	2
1.2	Modifiable keywords	LST	KWDLST	READ	1
		LST	KWDUPD	UPDATE	2
1.3	SYSVAR substitution	LST	SYSVAR	READ	3
2	STC operation
2.1	GCB/FCB	STC	TASKLST	READ	4
2.2	SFF operating statistics	STC	STCINFO	READ	5
2.3	ENQ processing	STC	ENQLST	READ	6
		STC	ENQFREE	UPDATE	7
2.4.1	License keys	STC	LCX01	READ	27
2.4.2		STC	LCX02	READ	26
2.4.3		STC	LCX03	READ	28
2.4.4	(See note on 2.4.n)	STC	LCX04	UPDATE	29
2.5	RACF user table	STC	URTLST	READ	11
		STC	URTUPD	UPDATE	12
2.6	Maintenance	STC	MODINFO	READ	13
2.7	TRACE facility	LST	KWDLST	READ	1
		LST	KWDUPD	UPDATE	2
2.8.2	LISTA	STC	LISTA	READ	14
3	Application Control
3.1	VDF	APL	VDFLST	READ	15
3.2	BOF	APL	BOFLST	READ	16
3.3	BAF	STC	ENQLST	READ	6
		STC	ENQFREE	UPDATE	7
4	Connectivity
4.1	ARM	CON	ARM	READ	17
4.2.2 or 5, OC or OX	OCF	CON	OCF	READ	18
4.2.2 or 5, TC	TCP/IP	CON	TCP	READ	19
	TCP/IP	CON	TCP	UPDATE	20
4.S	SYSVAR	CON	SYSVAR	READ	21
R	Reports
all	All reports	STA	DBINFO	READ	25
L	LOG
all	All options	LGF	LGFSTA	READ	31
D	Database
D.3.1	Browse	STA	STABRW	READ	22
D.3.2	Batch RPG	STA	STARPG	READ	23
D.3.3	Statistics Cleanup	STA	STAREP	UPDATE	24
D.4	File tailoring	DBT	DBFT	READ	30

Note on 2.4.n (License keys)

To be able to use function code 29 (update LICX file), the user must also be authorized for function code 27.

Activating RACF

The following profiles activate RACF for all or special BSA Service Manager functions:

B04.ssid.LST.KWDLST	: READ
B04.ssid.LST.KWDUPD	: UPDATE