home *** CD-ROM | disk | FTP | other *** search
/ Shareware Super Platinum 8 / Shareware Super Platinum 8.iso / mac / DATABASE / DOCPROC1.ZIP;1 / SAMP-DOC.ZIP / SHARE.DOC < prev    next >
Encoding:
Text File  |  1992-11-08  |  16.4 KB  |  212 lines
  1.                                                                                 
  2.                                                                                 
  3.                                                                                 
  4.                                                                                 
  5.                                                                                 
  6.                                                                                 
  7.                                                                                 
  8.                                                                                 
  9.                                                                                 
  10.                       *************************************                     
  11.                       *                                   *                     
  12.                       *    CREATING A RACF PROFILE        *                     
  13.                       *                                   *                     
  14.                       *                                   *                     
  15.                       *************************************                     
  16.                                                                                 
  17.                                                                                 
  18.                                                                                 
  19.                                                                                 
  20.                                                                                 
  21.                                                                                 
  22.                                                                                 
  23.                                                                                 
  24.                                                                                 
  25.                                                                                 
  26.                                                      John S. Ward               
  27.                                                        03/01/93                 
  28.  
  29. EJECT                                                                           
  30.                         SHARING DATA SETS WITH OTHER USERS - PANEL 3.11
  31.     _________________________________________________________________________
  32.    |                                                                         |
  33.    |                          RACF - SERVICES OPTION MENU                    |
  34.    | OPTION ===> 1                                                           |
  35.    |                                                                         |
  36.    | SELECT ONE OF THE FOLLOWING:                                            |
  37.    |                                                                         |
  38.    |    1  DATA SET           ADD, CHANGE, DELETE, or DISPLAY the profile    |
  39.    |                          for a data set.                                |
  40.    |                                                                         |
  41.    |    T  TUTORIAL           View a general description of RACF.            |
  42.    |                                                                         |
  43.    |_________________________________________________________________________|
  44.  
  45.    The RACF (Resource Access Control Facility) Utility allows "customized"
  46.    security profiles to be created for individual Data Sets (Discrete profile)
  47.    or for groups of Data Sets (Generic profile).  NOTE: allowing access to a
  48.    Data Set allows access to ALL members within that Data Set.  An access list
  49.    may be specified.  The following example creates a Discrete profile allowing
  50.    universal read access.
  51.                                                                                 
  52.    1. To access the RACF Utility Menu enter 3.11 on the Primary Command line.   
  53.    2. Select 1, from the Services Option Menu.                                  
  54.     _________________________________________________________________________   
  55.    |                                                                         |  
  56.    | OPTION ===> 1                                                           |  
  57.    |                                                                         |  
  58.    | SELECT ONE OF THE FOLLOWING:                                            |  
  59.    |                                                                         |  
  60.    |  1  ADD     Add a profile          D  DISPLAY  Display profile contents |  
  61.    |  2  CHANGE  Change a profile       S  SEARCH   Search RACF data set for |  
  62.    |  3  DELETE  Delete a profile                   profiles                 |  
  63.    |  4  ACCESS  Maintain access list                                        |  
  64.    |  5  AUDIT   Monitor access attempts                                     |  
  65.    |                (for auditors only)                                      |  
  66.    |                                                                         |  
  67.    | ENTER DATA SET PROFILE INFORMATION:                                     |  
  68.    |                                                                         |  
  69.    |   PROFILE NAME      ===> SAS.CNTL                                       |  
  70.    |   GENERIC           ===>          YES if the profile name is generic    |  
  71.    |   TYPE              ===>          Blank, MODEL, or TAPE                 |  
  72.    |   VOLUME SERIAL     ===>          If the data set is not cataloged      |  
  73.    |   UNIT              ===>          If option 1 and VOLUME SERIAL entered |  
  74.    |   DATA SET PASSWORD ===>          If the data set is password protected |  
  75.    |                                                                         |  
  76.    |   USE MODEL PROFILE ===>          YES if the profile is to be modeled   |  
  77.    |_________________________________________________________________________|  
  78.                                                                                 
  79.    3. Enter 1, for ADD, on the Option line. <TAB> to PROFILE NAME.              
  80.    4. Enter the Project_name.Type_name.  (The userid nor Member_name are
  81.       required).  Press <RET>.  The ADD DATA SET PROFILE Panel will be
  82.       displayed.
  83. EJECT
  84.     __________________________________________________________________________  
  85.    |                                                                          | 
  86.    |                           RACF - ADD DATA SET PROFILE                    | 
  87.    | COMMAND ===>                                                             | 
  88.    |                                                                          | 
  89.    |    PROFILE NAME: SAS.CNTL                                                | 
  90.    |                                                                          | 
  91.    | ENTER OR CHANGE DATA SET PROFILE INFORMATION:                            | 
  92.    |                                                                          | 
  93.    | OWNER             ===> USGJSW   USERID OR GROUP NAME                     | 
  94.    | LEVEL             ===> 0        0-99                                     | 
  95.    | FAILED ACCESSES   ===> FAIL     FAIL or WARN                             | 
  96.    | UACC              ===> READ     NONE, READ, UPDATE, CONTROL, or ALTER    | 
  97.    | AUDIT SUCCESSES   ===> NOAUDIT  READ, UPDATE, CONTROL, ALTER, or NOAUDIT | 
  98.    | AUDIT FAILURES    ===> READ     READ, UPDATE, CONTROL, ALTER, or NOAUDIT | 
  99.    | INDICATOR         ===> SET      SET, NOSET, or ONLY                      | 
  100.    | NOTIFY            ===>          Userid                                   | 
  101.    | ERASE WHEN DELETED===>          Blank or YES                             | 
  102.    |                                                                          | 
  103.    | TO ADD OPTIONAL INFORMATION, ENTER YES:                                  | 
  104.    |                                                                          | 
  105.    |    OTHER VOLUMES      ===> NO         SECURITY LEVEL/CATEGORIES ===> NO  | 
  106.    |    INSTALLATION DATA  ===> NO                                            | 
  107.    |    ACCESS LIST        ===> NO                                            | 
  108.    |                                                                          | 
  109.    |                                                                          | 
  110.    |AltM Mainmenu:AltH Help:VT100:         :LED    : SA:   : :FULL:   -  -  : | 
  111.    |__________________________________________________________________________| 
  112.                                                                                 
  113.                                                                                 
  114.    5. Leave the Option line blank.  <TAB> to the UACC (Universal Access) field
  115.       and change NONE to READ for read-only access to the data set. Press <RET>.
  116.       A message will be displayed that the Profile has been added.  The profile
  117.       just created allows any user read access to the PDS specified.
  118.                                                                                 
  119.                                                                                 
  120.                                                                                 
  121. EJECT                                                                           
  122.                                                                                 
  123.                            SPECIFYING AN ACCESS LIST                            
  124.                                                                                 
  125.                                                                                 
  126.     __________________________________________________________________________  
  127.    |                                                                          | 
  128.    |                           RACF - ADD DATA SET PROFILE                    | 
  129.    | COMMAND ===>                                                             | 
  130.    |                                                                          | 
  131.    |    PROFILE NAME: SAS.CNTL                                                | 
  132.    |                                                                          | 
  133.    | ENTER OR CHANGE DATA SET PROFILE INFORMATION:                            | 
  134.    |                                                                          | 
  135.    | OWNER             ===> USGJDO   USERID OR GROUP NAME                     | 
  136.    | LEVEL             ===> 0        0-99                                     | 
  137.    | FAILED ACCESSES   ===> FAIL     FAIL or WARN                             | 
  138.    | UACC              ===> NONE     NONE, READ, UPDATE, CONTROL, or ALTER    | 
  139.    | AUDIT SUCCESSES   ===> NOAUDIT  READ, UPDATE, CONTROL, ALTER, or NOAUDIT | 
  140.    | AUDIT FAILURES    ===> READ     READ, UPDATE, CONTROL, ALTER, or NOAUDIT | 
  141.    | INDICATOR         ===> SET      SET, NOSET, or ONLY                      | 
  142.    | NOTIFY            ===>          Userid                                   | 
  143.    | ERASE WHEN DELETED===>          Blank or YES                             | 
  144.    |                                                                          | 
  145.    | TO ADD OPTIONAL INFORMATION, ENTER YES:                                  | 
  146.    |                                                                          | 
  147.    |    OTHER VOLUMES      ===> NO         SECURITY LEVEL/CATEGORIES ===> NO  | 
  148.    |    INSTALLATION DATA  ===> NO                                            | 
  149.    |    ACCESS LIST        ===> YES                                           | 
  150.    |                                                                          | 
  151.    |                                                                          | 
  152.    |AltM Mainmenu:AltH Help:VT100:         :LED    : SA:   : :FULL:   -  -  : | 
  153.    |__________________________________________________________________________| 
  154.                                                                                 
  155.                                                                                 
  156.    A user may wish to limit access to a particular group or individual(s).  RACF
  157.    allows a list to be specified.  To accomplish this, follow steps one through
  158.    four.  Specify NONE at UACC field.
  159.                                                                                 
  160.    5. <TAB> to ACCESS LIST and enter 'YES' as indicated above.  The DATA SET
  161.       ACCESS LIST ADD panel will be displayed.
  162. EJECT                                                                           
  163.                                                                                 
  164.     __________________________________________________________________________  
  165.    |                                                                          | 
  166.    |                                                                          | 
  167.    |                  RACF - MAINTAIN DATA SET ACCESS LIST - ADD              | 
  168.    | COMMAND ===>                                                             | 
  169.    |                                                                          | 
  170.    |   PROFILE NAME: SAS.CNTL                                                 | 
  171.    |                                                                          | 
  172.    |ENTER AUTHORITY TO BE GRANTED:                                            | 
  173.    |   ACCESS AUTHORITY  ===> READ      NONE, READ, UPDATE, CONTROL, or ALTER | 
  174.    |                                                                          | 
  175.    |ENTER USER/GROUP ID TO BE ADDED:                                          | 
  176.    |   ===> USG      ===> USGEHB   ===> USG01    ===>          ===>           | 
  177.    |   ===>          ===>          ===>          ===>          ===>           | 
  178.    |   ===>          ===>          ===>          ===>          ===>           | 
  179.    |   ===>          ===>          ===>          ===>          ===>           | 
  180.    |   ===>          ===>          ===>          ===>          ===>           | 
  181.    |                                                                          | 
  182.    |ENTER INFORMATION FOR PROFILE FROM WHICH ACCESS LIST IS TO BE COPIED:     | 
  183.    |   PROFILE NAME  ===>                                                     | 
  184.    |   CLASS         ===> DATASET                                             | 
  185.    |   GENERIC       ===>               YES if the profile name is generic    | 
  186.    |   VOLUME SERIAL ===>               If a non-cataloged data set profile   | 
  187.    |                                                                          | 
  188.    |TO ADD PROGRAM NAMES, ENTER YES ===>                                      | 
  189.    |                                                                          | 
  190.    |                                                                          | 
  191.    |AltM Mainmenu:AltH Help:VT100:         :LED    : SA:   : :FULL:   -  -  : | 
  192.    |__________________________________________________________________________| 
  193.                                                                                 
  194.    6. Leave the Command Line blank.  Enter READ at the ACCESS AUTHORITY field.
  195.                                                                                 
  196.    7. <TAB> to USER/GROUP Section and enter the appropriate information.  Press
  197.       <RET>.  A message will indicate that the profile has been added.
  198.                                                                                 
  199.    NOTE: To restrict access to a particular group of student (class) ID's,
  200.          enter the first five characters as in the example above, ie.; USG01.
  201.                                                                                 
  202.                                                                                 
  203.     Different levels of access may be specified for different users or groups   
  204.     of users within the same profile.  For example, the user may wish to allow
  205.     alter access to a fellow professor and read access to a class of students.
  206.     Each level of the profile must be created separately.  To do this, follow
  207.     the steps above to create a profile.  After specifying one level of access
  208.     and pressing <RET>, select Option 4 from the RACF Option menu.  Another
  209.     menu will be displayed.  Select one to add.  This will display the DATA SET
  210.     ACCESS LIST Panel at which time another access level/userid combination     
  211.     may be specified.                                                           
  212.