Resource access security and AGN security considerations

Resource access security (RAS) prevents an application program that is running in a dependent region from using IMS™ resources unless it is authorized to do so.

This means that an ZDT/IMS function running in BMP mode is prevented from using a PSB unless the user is authorized to use that PSB. This in turn means that users cannot use a dynamic PSB unless they are authorized to use all of the dynamic PSBs that ZDT/IMS can use. See Declaring the dynamic PSBs.

You might have to customize the IIMS and JIMS class profiles to provide ZDT/IMS users with the access they require. No special customization is required for ZDT/IMS to be able to access subsystems that use RAS.

Before IMS™ Version 9, Application Group Names (AGNs) were used to secure dependent regions. In IMS Version 9 RAS superseded AGN security. Support for AGNs was removed from IMS in Version 10.

ZDT/IMS still allows the user to specify an AGN on the entry panel or in batch JCL. However, if the IMS™ subsystem you are accessing is Version 10 or later, IMS ignores the specified AGN value.

If you do use ZDT/IMS to access IMS™ subsystems that use AGNs to secure BMP regions, you must specify that the subsystem uses AGN security when customizing the ZDT/IMS installation options module. You also have the option of specifying the AGNs that you want ZDT/IMS to use. For information on both of these tasks, see Specifying AGNS.