Securing IDMS DCMT VARY AREA for specific areas names only

Products

• IDMS
• IDMS - Database

Issue/Introduction

Is there any way to restrict a user in IDMS to perform DCMT VARY AREA only on specific areas, like only VSAM areas?

Environment

Release: 19.0

Resolution

DCMT security using #CTABGEN activity numbers only works at the DCMT command level not to specific resources. There's no facility within IDMS to secure DCMT VARY AREA for specific areas names.
The only way to achieve this is to write a front-end user program that would get invoked when task code DCMT is issued.
The user program needs to check the command input and for DCMT VARY AREA determine if this user is allowed to use that command for that area name. 
If the command is allowed then #LINK to RHDCMT00 and pass the command to it. 

Additional Information

See documentation section Invoking DCMT and DCUF Commands from Programs.