Using FMNSECUR to protect DASD volumes from fullpack access
When you use FMNSECUR to control access to individual functions
or groups of functions, you specify an access type of READ or NONE.
For FILEM.DISK.FULLPACK only, you can also specify ALTER or UPDATE.
The access type for FILEM.DISK.FULLPACK has the following meaning:
- ALTER
- Read and update access to all volumes
- UPDATE
- Read access to all volumes, update access to specific volumes
- READ
- Read and update access to specific volumes
- NONE
- No fullpack access.
If you give some users UPDATE or READ access to FILEM.DISK.FULLPACK,
you can also specify which disk volumes the user has access to. The
following examples illustrate this.
- To let a user access a disk volume with fullpack read and fullpack
update functions, add statements similar to this to FMNSECUR:
FMNS CLASS=DASDVOL, ENTITY=volser, ACCESS=ALTER, USERID=userid
where volser is the volume serial of the disk volume.
- To permit a user to access a disk volume with fullpack read functions
but not fullpack update functions, add statements similar to this
to FMNSECUR:
You could also use ACCESS=UPDATE, which has the same effect as ACCESS=READ in this case.FMNS CLASS=DASDVOL, ENTITY=volser, ACCESS=READ, USERID=userid
- To prevent a user from accessing a disk volume with fullpack read
or fullpack update functions, add statements similar to this to FMNSECUR:
FMNS CLASS=DASDVOL, ENTITY=volser, ACCESS=NONE, USERID=userid