Using FMNSECUR to protect DASD volumes from fullpack access

When you use FMNSECUR to control access to individual functions or groups of functions, you specify an access type of READ or NONE. For FILEM.DISK.FULLPACK only, you can also specify ALTER or UPDATE. The access type for FILEM.DISK.FULLPACK has the following meaning:
ALTER
Read and update access to all volumes
UPDATE
Read access to all volumes, update access to specific volumes
READ
Read and update access to specific volumes
NONE
No fullpack access.
If you give some users UPDATE or READ access to FILEM.DISK.FULLPACK, you can also specify which disk volumes the user has access to. The following examples illustrate this.
  • To let a user access a disk volume with fullpack read and fullpack update functions, add statements similar to this to FMNSECUR:
    FMNS CLASS=DASDVOL,
         ENTITY=volser,
         ACCESS=ALTER,
         USERID=userid

    where volser is the volume serial of the disk volume.

  • To permit a user to access a disk volume with fullpack read functions but not fullpack update functions, add statements similar to this to FMNSECUR:
    FMNS CLASS=DASDVOL,
         ENTITY=volser,
         ACCESS=READ,
         USERID=userid
    You could also use ACCESS=UPDATE, which has the same effect as ACCESS=READ in this case.
  • To prevent a user from accessing a disk volume with fullpack read or fullpack update functions, add statements similar to this to FMNSECUR:
    FMNS CLASS=DASDVOL,
         ENTITY=volser,
         ACCESS=NONE,
         USERID=userid