Prevent viewing dataset with particular first qualifier 3.4

TSO Programming, ISPF, SDF, SDSF and PDF, FTP, TCP/IP Concepts, SNA & SNA/IP etc...
Shanthi_Palani
Posts: 10
Joined: Mon Oct 10, 2016 3:08 pm
Skillset: JCL,VSAM,COBOL,DB2,CICS
Referer: Google

Prevent viewing dataset with particular first qualifier 3.4

Postby Shanthi_Palani » Thu Mar 29, 2018 6:54 pm

Hello Experts,
I would like to know whether we can in anyway stop viewing datasets with a particular first qualifier in 3.4.
Reason: The organization I am working in didn't want the developers to view production datasets which starts with let's say AAAA.**. Actually I won't be able to browse/view /edit the prod dataset, I don't have access for it. But sometimes accidentally I try to view a prod dataset, and I will get a prompt message that I don't have read access and they get logged and a report is generated saying that I tried an unauthorised access to a dataset.
Can you please help me in this in anyway?

Thank you!

enrico-sorichetti
Global moderator
Posts: 3006
Joined: Fri Apr 18, 2008 11:25 pm
Skillset: tso,rexx,assembler,pl/i,storage,mvs,os/390,z/os,
Referer: www.ibmmainframes.com

Re: Prevent viewing dataset with particular first qualifier

Postby enrico-sorichetti » Thu Mar 29, 2018 7:45 pm

the power of Your organisation should ask the system support group to write the appropriate ISPF exit as per
https://www.ibm.com/support/knowledgece ... slexit.htm
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort

Robert Sample
Global moderator
Posts: 3720
Joined: Sat Dec 19, 2009 8:32 pm
Skillset: Systems programming, SAS, COBOL, CICS, JCL, SMS, VSAM, etc.
Referer: other forum
Location: Dubuque, Iowa, USA

Re: Prevent viewing dataset with particular first qualifier

Postby Robert Sample » Thu Mar 29, 2018 7:52 pm

This is not something an application programmer can do anything about. It requires system-level access to the security system, and hence MUST be accomplished by the site support group.

User avatar
prino
Posts: 641
Joined: Wed Mar 11, 2009 12:22 am
Skillset: PL/I - CICS - DB2 - IDMS - REXX - JCL, most in excess of three decades
Referer: Google
Location: Vilnius, Lithuania
Contact:

Re: Prevent viewing dataset with particular first qualifier

Postby prino » Thu Mar 29, 2018 10:13 pm

Shanthi_Palani wrote:I would like to know whether we can in anyway stop viewing datasets with a particular first qualifier in 3.4.

It's very easy, do not enter the first qualifier in 3.4!
Robert AH Prins
robert.ah.prins @ the.17+Gb.Google thingy

User avatar
Pedro
Posts: 686
Joined: Thu Jul 31, 2008 9:59 pm
Skillset: ISPF
Referer: google
Location: Silicon Valley

Re: Prevent viewing dataset with particular first qualifier

Postby Pedro » Fri Mar 30, 2018 1:45 am

It requires system-level access to the security system


I think Enrico's answer is appropriate. It is not situation handled by RACF, but an ISPF exit. Though, I disagree that it requires a system programmer. I think any exits can be user written and be put in their own ISPLLIB data set. They just need some assembler experience.
Pedro Vera


  • Similar Topics
    Replies
    Views
    Last post