Customizing to protect update functions in ZDT/CICS
You can protect update functions in ZDT/CICS by means of the facility class FILEM.CICS.UPDATE, together with the SEC option in HFM3POPT.
If you set SEC=YES in HFM3POPT and then give or deny users access
to the FILEM.CICS.UPDATE facility class, you can protect the following
functions when running ZDT/CICS.
- DSC
- Data set copy
- CDE
- CICS® transient data edit
- CFE
- CICS® file edit
- CTE
- CICS® temporary storage edit
- DSE
- Data set edit
- DSEB
- Data set edit batch
- DSG
- Data set create
- DSU
- Data set update
- FCH
- Find/change - only protected if the function attempts the update command
The normal security checking of FILEM.FUNCTION.function_code applies to these functions when SEC=YES has been specified in HFM3POPT. If you do not specify SEC=YES, then no checking is done for these functions.