ULOG on SDSF menu on z/OS 2.5

Products

• Top Secret

Issue/Introduction

How to suppress ULOG on SDSF menu on z/OS 2.5.
SDSF class, ISFCMD.ODSP.ULOG.jesx resource controls the ULOG on SDSF menu, but no request found when SDSF menu is opened. 

Environment

Release : 16.0

Component :

Resolution

According to IBM PTF, PH38663, ULOG does not require SAF in z/OS 2.5.

PH38663 information :

In SDSF V2R5, entering a command, user receives console
activation failure messages when not authorized to the EMCS
console. An option is needed to condition console activation
based on ULOG authorization.

As of SDSF V2R5, access to the ULOG panel no longer requires SAF
access to the ULOG command.

SDSF adds messages that are unrelated to commands and responses
to ULOG, such as sectrace.  SDSF V2R5 users can now view those
messages without the need for ULOG authority.

SDSF activates an extended console (EMCS) when the first
system command is issued or when the ULOG is accessed.  However,
some installations do not grant access to users to activate an
extended console and instead use ULOG authority to restrict
console usage.
This APAR implements a new ISFPRMxx custom property,
Console.EMCS.UlogAuthReq, to allow the installation to
maintain this preference.

With this change, access to the ULOG panel will remain
unauthorized.  When the property is set to FALSE (the
default), SDSF will activate the extended console when the
first system command is generated or the ULOG panel is
accessed.  The user must be authorized to activate the
console.

When the property is set to TRUE, SDSF will check READ
access to resource ISFCMD.ODSP.ULOG.jesx in the SDSF
class.  If the user has access, the extended console will
be activated.  Otherwise, the activation will be skipped.

See the doc hold associated with this APAR for more
information on the custom property.

This APAR includes changes to the SDSF V2R5 sample
ISF.ISFJCL(ISFPRM01) to include the new custom property.
For the down-level systems SDSF V2R3 and SDSF V2R4,
this APAR contains toleration support
to ignore the custom property at those levels.  This allows
you to share ISFPRMxx between SDSF V2R3, V2R4, and V2R5.

This APAR may be installed at any time.  However, if you
install the APAR on SDSF V2R5, and share your ISFPRMxx that
includes the new custom property, you must install the APAR
on your SDSF V2R3 and SDSF V2R4 systems.

Alternatively, if you install the APAR on SDSF V2R5 and share
your ISFPRMxx, do not include the new custom property until
the APAR has been installed on SDSF V2R3 and SDSF V2R4.