z/OS 2.5 SDSF ACF2 External Security for logonid with the Security privilege

Products

• ACF2 - z/OS

Issue/Introduction

Is there a way to limit what panels are displayed for lids that have the security privilege ?                                   

There are R(SDF) ISFCMD rules to allow access and display panels for certain lids, and they're working for lids without Security. But lids with Security apparently override the rules and all panels are displayed.                         

Environment

Release : 16.0

Resolution

ACF2 GSO SAFDEF records can be used to limit access to SDSF resources for logonid with the SECURITY privilege.

Here are two sample SAFDEFs that can be coded for a specific USERID(logonid) and a masked ENTITYx(resource) to limit a logonid that has the SECURITY privilege.

INSERT SAFDEF.SDSF1 ID(SDSF1) FUNCRET(8) RETCODE(8) FUNCRSN(8) -
MODE(IGNORE) USERID(secuser) -
RACROUTE(REQUEST=AUTH,CLASS=SDSF,ENTITYX=ISFAUTH.DEST.LOCAL.DATASET.-)
                                   
INSERT SAFDEF.SDSF2 ID(SDSF2) FUNCRET(8) RETCODE(8) FUNCRSN(8) -
MODE(IGNORE) USERID(secusr) -
RACROUTE(REQUEST=AUTH,CLASS=JESSPOOL,ENTITYX=SYS8.USER002.-)