CAS9SAFC missing default resource classes
Article ID: 17472
Updated On:
Products
Issue/Introduction
Running Common Services r14.1 with CAIRIM PTF RO69205 installed, the CAS9SAFC load module (located in cai.CAW0LINK) and related source (located in cai.CAW0SAMP) no longer contain the default resource classes in the translation table. As a result you may have some questions like:
- Do these classes exist elsewhere or have they been removed all together?
- How do I make changes to the previously defined default tables or how to go about defining new custom tables?
Environment
14.1
Resolution
In previous releases, after CCS was installed, if you were using CAISSF for IBM RACF and you needed to make changes to resource classes used by Broadcom products, you were required to install a user modification (ie. CAS9MOD). This modification updated class tables that were embedded within CAS9RACL and CAS9SAFC.
Beginning with release 14.1 we introduce control statements in the CAIRIM initialization routine to replace that USERMOD. Now after the installation, you identify IBM RACF class table values in your existing user modification and code the necessary parameters using CAIRIM control statements. Default class table values are still defined so you only need to modify or add class tables if this is something you did previously. The new control statements are defined in a standard FB 80-byte file and are identified to the CAS9 procedure by a new CAIRACF DD statement. The syntax of this new control statement is as follows:
RACFCLASS Broadcom-solution classname,translated classname, FASTAUTH=NO|YES,CICS=NO|YES
Refer to the Common Services r14.1 documentation for related information.
Here is an example of what the Resource Translation Table looked like in the CAS9SAFC source member previously delivered. Here you can see the various class table values. One common change that customers made was to change the resource check from a FASTAUTH check. A FASTAUTH check is made if the 4th column contains a x'80' as can be seen below for resource class CAADMIN and others.
RESTABLE DS 0F 00040800
DC C' DEFAULT',C' D@FAULT',X'00',X'00',X'00',X'00' 00040900
* BELOW USED BY VIEWPOINT 00041000
DC C'ACAPPL ',C'AC@PPL ',X'00',X'00',X'00',X'00' 00041100
DC C'ACCBPROC',C'AC@BPROC',X'00',X'00',X'00',X'00' 00041200
DC C'ACDIALOG',C'AC@DLG ',X'00',X'00',X'00',X'00' 00041300
DC C'ACLIST ',C'AC@LST ',X'00',X'00',X'00',X'00' 00041400
DC C'ACMSG ',C'AC@SG ',X'00',X'00',X'00',X'00' 00041500
DC C'ACPANEL ',C'AC@ANEL ',X'00',X'00',X'00',X'00' 00041600
DC C'ACREPORT',C'AC@EPORT',X'00',X'00',X'00',X'00' 00041700
DC C'ACSQL ',C'AC@QL ',X'00',X'00',X'00',X'00' 00041800
* BELOW USED BY ???? 00041900
DC C'CAADMIN ',C'CA@DMIN ',X'00',X'80',X'00',X'00' 00042000
DC C'CACMD ',C'CA@MD ',X'00',X'80',X'00',X'00' TD46501 00042100
* DC C'CACMD ',C'CA@MD ',X'00',X'00',X'00',X'00' T62T649 00042200
* BELOW USED BY APCDDS 00042300
DC C'CADDS ',C'CA$DS ',X'00',X'80',X'00',X'00' 00042400
* BELOW USED BY ???? 00042500
DC C'CADOC ',C'CA@OC ',X'00',X'00',X'00',X'00' 00042600
* BELOW USED BY LIBRARIAN 00042700
DC C'CALIBMEM',C'CA@IBMEM',X'00',X'00',X'00',X'00' 00042800
DC C'CACCFDSN',C'CA@SNCCF',X'00',X'00',X'00',X'00' 00042900
DC C'CACCFMEM',C'CA@EMCCF',X'00',X'00',X'00',X'00' 00043000
* BELOW USED BY DISPATCH 00043100
DC C'CAREPORT',C'CA$EPORT',X'00',X'80',X'00',X'00' 00043200
* BELOW USED BY CA-1 & CA-TLMS 00043300
DC C'CATAPE ',C'CA@APE ',X'00',X'80',X'00',X'00' 00043400
* BELOW USED BY VMAN 3.0 00043500
DC C'CAVAPPL ',C'CA@APPL ',X'00',X'00',X'00',X'00' 00043600
* BELOW USED BY DOCVIEW 00043700
DC C'DOCVIEW ',C'DOCVIEW ',X'00',X'80',X'00',X'00' 00043800
* BELOW USED BY ???? 00043900
DC C'CALENDAR',C'CA@ENDAR',X'00',X'80',X'00',X'00' CA-7 00044000
DC C'DTSYSTEM',C'DT@YSTEM',X'00',X'80',X'00',X'00' 00044100
DC C'DTADMIN ',C'DT@DMIN ',X'00',X'80',X'00',X'00' 00044200
DC C'DTTABLE ',C'DT@ABLE ',X'00',X'80',X'00',X'00' 00044300
DC C'DTUTIL ',C'DT@TIL ',X'00',X'80',X'00',X'00' 00044400
DC C'DUC ',C'TD$CTRN ',X'00',X'80',X'00',X'00' 00044500
DC C'JOBNAME ',C'JO@NAME ',X'00',X'00',X'00',X'00' 00044600
DC C'MICCMD ',C'MI@CMD ',X'00',X'80',X'00',X'00' 00044700
DC C'OPCMD ',C'OP@MD ',X'00',X'80',X'00',X'00' 00044800
DC C'PANEL ',C'PA@EL ',X'00',X'80',X'00',X'00' 00044900
DC C'RECIPID ',C'RE@IPID ',X'00',X'80',X'00',X'00' 00045000
DC C'SCHEDULE',C'SC@EDULE',X'00',X'00',X'00',X'00' 00045100
* DC C'SUBMIT ',C'SU@MIT ',X'00',X'80',X'00',X'00' 00045200
DC C'SUBMIT ',C'SU@MIT ',X'00',X'00',X'00',X'00' T62T649 00045300
DC C'STATION ',C'ST@TION ',X'00',X'00',X'00',X'00' 00045400
* 00045500
DC C'DXTABLE ',C'DX@ABLE ',X'00',X'80',X'00',X'00' TB49543 00045600
DC C'DCTABLE ',C'DC@ABLE ',X'00',X'80',X'00',X'00' TB49543 00045700
DC C'DFTABLE ',C'DF@ABLE ',X'00',X'80',X'00',X'00' TB49543 00045800
DC C'DRTABLE ',C'DR@ABLE ',X'00',X'80',X'00',X'00' TB49543 00045900
DC C'DSTABLE ',C'DS@ABLE ',X'00',X'80',X'00',X'00' TB49543 00046000
* BELOW USED BY Scheduler T62T649 00046100
DC C'CALENDAR',C'CA@ENDAR',X'00',X'00',X'00',X'00' T62T649 00046200
DC C'DATETAB ',C'DA@ETAB ',X'00',X'00',X'00',X'00' T62T649 00046300
* BELOW USED BY UNIVERSE 00046400
DC C'UNVEDIT ',C'UN@EDIT ',X'00',X'00',X'00',X'00' 00046500
DC C'UNVRPRT ',C'UN@RPRT ',X'00',X'00',X'00',X'00' 00046600
DC C'UNVPGM ',C'UN@PGM ',X'00',X'00',X'00',X'00' 00046700
* BELOW USED BY VMAN 00046800
DC C'VMANAPPL',C'VM@NAPPL',X'00',X'00',X'00',X'00' 00046900
DC C'VTRMNODE',C'VT@MNODE',X'00',X'00',X'00',X'00' 00047000
RESTBEND DC C'ZZZZZZZZ',C'ZZZZZZZZ',X'00',X'00',X'00',X'00' 00047100
EJECT 00047200
The new method involving the use of the RACFCLASS control statement would require the following statement to change PANEL to NOT issue a FASTAUTH check:
RACFCLASS PANEL,PA@EL,FASTAUTH=NO
Additional Information
The Release Notes provides a nice diagram of the default dynamic table as shown here:
| CA Solution Class Name | Translated Class Name | FASTAUTH | Used by CICS | |
| ACAPPL | AC@PPL | |||
| ACCBPROC | AC@BPROC | |||
| ACDIALOG | AC@DLG | |||
| ACLIST | AC@LST | |||
| ACMSG | AC@SG | |||
| ACPANEL | AC@ANEL | |||
| ACREPORT | AC@EPORT | |||
| ACSQL | AC@QL | |||
| CAADMIN | CA@DMIN | YES | ||
| CACCFDSN | CA@SNCCF | |||
| CACCFMEM | CA@EMCCF | |||
| CACMD | CA@MD | YES | YES | |
| CADDS | CA$DS | YES | ||
| CADOC | CA@OC | |||
| CALENDAR | CA@ENDAR | YES | ||
| CALIBMEM | CA@IBMEM | |||
| CAREPORT | CA@EPORT | YES | ||
| CATAPE | CA@APE | YES | ||
| CAVAPPL | CA@APPL | |||
| DATETAB | DA@ETAB | |||
| DCTABLE | DC@ABLE | YES | ||
| DFTABLE | DF@ABLE | YES | ||
| DOCVIEW | DOCVIEW | YES | ||
| DRTABLE | DR@ABLE | YES | ||
| DSTABLE | DS@ABLE | YES | ||
| DTADMIN | DT@DMIN | YES | ||
| DTSYSTEM | DT@YSTEM | YES | ||
| DTTABLE | DT@ABLE | YES | ||
| DTUTIL | DT@TIL | YES | ||
| DUC | TD$CTRN | YES | ||
| DXTABLE | DX@ABLE | YES | ||
| JOBNAME | JO@NAME | |||
| MICCMD | MI@CMD | YES | ||
| OPCMD | OP@MD | YES | ||
| PANEL | PA@EL | YES | ||
| RECIPID | RE@IPID | YES | ||
| SCHEDULE | SC@EDULE | |||
| STATION | ST@TION | |||
| SUBMIT | SU@MIT | |||
| UNVEDIT | UN@EDIT | |||
| UNVRPRT | UN@RPRT | |||
| UNVPGM | UN@PGM | |||
| VMANAPPL | VM@NAPPL | |||
| VTRMNODE | VT@MNODE | |||
Attachments
Feedback
