Page 1 of 1

Prevent viewing dataset with particular first qualifier 3.4

PostPosted: Thu Mar 29, 2018 6:54 pm
by Shanthi_Palani
Hello Experts,
I would like to know whether we can in anyway stop viewing datasets with a particular first qualifier in 3.4.
Reason: The organization I am working in didn't want the developers to view production datasets which starts with let's say AAAA.**. Actually I won't be able to browse/view /edit the prod dataset, I don't have access for it. But sometimes accidentally I try to view a prod dataset, and I will get a prompt message that I don't have read access and they get logged and a report is generated saying that I tried an unauthorised access to a dataset.
Can you please help me in this in anyway?

Thank you!

Re: Prevent viewing dataset with particular first qualifier

PostPosted: Thu Mar 29, 2018 7:45 pm
by enrico-sorichetti
the power of Your organisation should ask the system support group to write the appropriate ISPF exit as per
https://www.ibm.com/support/knowledgece ... slexit.htm

Re: Prevent viewing dataset with particular first qualifier

PostPosted: Thu Mar 29, 2018 7:52 pm
by Robert Sample
This is not something an application programmer can do anything about. It requires system-level access to the security system, and hence MUST be accomplished by the site support group.

Re: Prevent viewing dataset with particular first qualifier

PostPosted: Thu Mar 29, 2018 10:13 pm
by prino
Shanthi_Palani wrote:I would like to know whether we can in anyway stop viewing datasets with a particular first qualifier in 3.4.

It's very easy, do not enter the first qualifier in 3.4!

Re: Prevent viewing dataset with particular first qualifier

PostPosted: Fri Mar 30, 2018 1:45 am
by Pedro
It requires system-level access to the security system


I think Enrico's answer is appropriate. It is not situation handled by RACF, but an ISPF exit. Though, I disagree that it requires a system programmer. I think any exits can be user written and be put in their own ISPLLIB data set. They just need some assembler experience.