Syntax of the FMNS macro

Figure 1. Syntax

1 FUNCTION=
2.1 fc
2.1 *
1 CLASS=
2.1 class
2.1 *
1,ENTITY=
2.1 entity
2.1 *
2 ,ACCESS=
3.1 NONE
3.1 READ
3.1 UPDATE
3.1 CONTROL
3.1 ALTER
1 ,USERID=
2.1 userid
2.1 *
1 ,JOBNAME=
2.1 jobname
2.1 *
The parameters of FMNS are described below:
FUNCTION
To protect a function, specify FUNCTION=fc (where fc is the function code). This is equivalent to specifying CLASS=FACILITY, ENTITY=FILEM.FUNCTION.fc.
CLASS
To protect a group of functions, specify CLASS=FACILITY. To protect a DASD volume from fullpack access, specify CLASS=DASDVOL.
ENTITY
To protect a group of functions, specify ENTITY=FILEM.group.name (see File Manager function to profile name cross-reference for the group names to use). To protect a DASD volume from fullpack access, specify ENTITY=volser.
ACCESS
For all profiles except fullpack access, specify ACCESS=NONE to deny access, or any other value (READ, UPDATE, CONTROL, or ALTER) to give access. To protect fullpack access to DASD volumes, you can also use UPDATE and ALTER to grant read or update access to specific volumes. For more information, see Using FMNSECUR to protect DASD volumes from fullpack access.
USERID
Specify either a user ID or an asterisk (*) to indicate all users who have not previously been specified for this entity. If you specify USERID, do not specify JOBNAME.
JOBNAME
Specify either a File Manager job name or an asterisk (*) to indicate all jobs that have not previously been specified for this entity. If you specify JOBNAME, do not specify USERID.

You can control access based on user ID or job name. In batch mode, the job name is passed to FMNSECUR and the user ID is also passed to FMNSECUR if it is available. FMNSECUR reads through the list of FMNS macros until a match is found for the user ID or job name, and either the profile name or the function code. The first match found is used.