APAR #: SO07032 adds a new LIMITED bit field to the LIDREC that corresponds to the RACF RESTRICTED attribute. It would normally be assigned to the IZUGUEST LOGONID for sites that use z/OSMF.
Basically the fix changes dataset and resource validation so that a user with LIMITED does not match a UID(*) ALLOW rule entry.
If a site wants to give IZUGUEST (or any LIMITED user) access to a dataset or resource they would have to set up the rule with something more specific than just UID(*) ALLOW.
**NOTE** This APAR is PE and is corrected by SO08598