Problem:
A client audit raised a concern with the ACF2 TAPE-LBL privilege on LIDS, as included in the list of tasks are the started task IDs for CA View.
Environment: z/OS
Cause:
A client audit raised a concern with the ACF2 TAPE-LBL privilege on LIDS, as included in the list of tasks are the started task IDs for CA View.
Resolution:
There is no mention, in any CA View documentation or support cases, of the ACF2 TAPE-LBL privilege.
View tapes are created with standard tape labels (LABEL=(,SL)).
Access to reports on View tapes can only occur from CA View itself (online or batch), as View's tapes have a proprietary format.
As the TAPE-LBL privilege means that the tape label is validated by ACF2 before the user is given access, and since View makes its own accesses, then View may not need the TAPE-LBL privilege.