Customizing to protect update functions in FM/CICS

You can protect update functions in FM/CICS by means of the facility class FILEM.CICS.UPDATE, together with the SEC option in FMN3POPT.

If you set SEC=YES in FMN3POPT and then give or deny users access to the FILEM.CICS.UPDATE facility class, you can protect the following functions when running FM/CICS.
DSC
Data set copy
CDE
CICS® transient data edit
CFE
CICS® file edit
CTE
CICS® temporary storage edit
DSE
Data set edit
DSEB
Data set edit batch
DSG
Data set create
DSU
Data set update
FCH
Find/change - only protected if the function attempts the update command

The normal security checking of FILEM.FUNCTION.function_code applies to these functions when SEC=YES has been specified in FMN3POPT. If you do not specify SEC=YES, then no checking is done for these functions.