Seegeneral-use programming

F

(optional) supplementary group IDs, or an (optional) saved set-group-ID.

FASTAUTH request

.

The

issuing

of

the RACROUTE

.

A profile that

defines a

group. The

macro with REQUEST=FASTAUTH specified. The

group profile

information in

the profile includes the

group name,

primary function of a

FASTAUTH

request

is to

check

a

 

 

 

 

 

 

 

 

 

 

profile owner, and users in the group.

 

user's authorization to a RACF-protected resource or

 

 

 

function. A

FASTAUTH

request uses

only

in-storage

Seegeneral-use programming

interface.

 

profiles for faster performance. The FASTAUTH

GUPI .

 

 

 

 

 

 

request replaces the FRACHECK function. See also

 

 

 

 

authorization checking.

 

 

 

 

H

 

 

 

 

G

HFS . Seehierarchical file. system

general

resource

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

hierarchical

file

system

 

(HFS) .

 

Information

is

 

 

 

 

 

 

.

 

Any

 

system

 

resource,

other

than

 

 

 

 

in

a

 

tree-like

 

structure

of

directories.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

organized

 

 

MVS

data

set,

 

that

 

is

defined in

the

class

 

 

scriptor

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

directory

can contain files or other directories.

table (CDT). General resources are

DASD

volumes,

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

tape volumes, load modules, terminals, IMS and CICS

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

transactions,

and

installation-defined

resource

Iclasses.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

general

resource

profile

 

 

.

A

profile

that

 

 

 

ICB .

Seeinventory

 

control

 

.block

 

 

 

 

 

 

 

 

 

 

 

 

provides

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

RACF

protection

 

for

one

or

 

more

general

resources.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

The

information

 

in

the

profile

can

 

include

 

inventory

control

block

 

(ICB) .

 

The

 

first block

in

a

 

 

 

 

the

 

general

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

RACF database. The ICB contains a general

 

 

 

 

resource profile name, profile owner, universal access

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

authority,

access

list,

and

other

 

data.

 

description

of

 

the

database.

 

 

 

 

 

 

 

 

general-use programming interface (GUPI)

 

 

 

 

.

 

An

 

 

 

Kin

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

interface that IBM makes available for use

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

customer-written

programs

with

few

restrictions

and

that

 

 

OpenEdition

 

MVS,

the

part

of

an

 

 

does

not

require knowledge

of

the

detailed

kernel

 

 

.

 

(1) In

 

 

 

design or

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

implementation

of

the

IBM

software

 

 

 

 

 

operating system that contains programs for such ta

 

product. See

 

also

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

product-sensitive

programming

interface.

(PSPI)

as

I/O, management, and control of hardware and th

scheduling

of

user

tasks.

(2) The

 

part

of

the

sys

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

generic

profile

 

.

 

A

resource

 

profile

that

can

that

is

an

interface

with

the hardware

and

provi

 

 

 

provide

 

for

other

system

layers

 

such

as

system

RACF

protection

 

for

one

or

 

more

 

 

 

 

 

 

services

 

 

 

resources. The

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

(3) The

p

resources protected by a generic

profile

file system support, and device drivers.

have

similar

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

names

and

identical

security

requirements. Foran

 

 

operating system that performs basic functions s

example,

a

generic

data-set

profile

can

 

as

 

 

allocating

hardware

resources.

(4) A

program

that

protect

one

or

 

different

 

operating

 

system

environments

more

data

sets.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

can

 

run

 

under

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

See

 

alsoshell. (5) A

part

of

 

a

 

program

that

must

be

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

GID .

Seegroup

 

identifier.

 

 

 

 

 

 

 

 

 

 

central

 

storage

 

in

order

to

 

load

 

other

parts

of

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

program.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

group

.

 

A

collection

 

of

RACF-defined

users

who

can

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

share

access

 

authorities

 

for

protected

resources.

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

L

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

group

authority

 

.

 

An

authority

 

specifying

which

LIST

 

 

request

 

.

The

issuing

of

the

RACROUTE

macro

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

functions a user can perform in a group. The group

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

authorities

are

USE,

CREATE,

 

CONNECT,

and

JOIN. with

REQUEST=LIST

 

specified. A

 

LIST

 

request

builds

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

in-storage profiles for

RACF-defined

resources. The

group

identifier

(GID) .

(1) In

 

OpenEdition

MVS,

a

LIST

 

request

replaces

the

RACLIST

 

function.

 

 

 

unique

number

assigned

to

a

group

 

of

related

 

users.

 

(LU)

 

.

Local

 

LUs

 

are

LUs

defined

to

The

GID

can

often

be

 

substituted

in

 

 

local

 

logical

unit

 

 

 

 

commands

 

that

 

system;

 

partner

 

LUs

are

defined

to remote

take a

group

 

name

as

an

argument.

(2) A

 

 

the

 

MVS

 

 

 

 

 

 

systems. It

is

 

a

matter

of

 

point

of view. From

th

non-negative

integer,

 

which

can

be

 

contained

 

 

 

 

in

 

an

 

 

of

a

 

remote

system,

LUs

defined

to

that

object

of gidtypet,that

is

used to

 

 

 

 

 

of

 

view

 

identify a group

 

of

 

 

 

and

those

 

on

 

MVS

are

the

partner

system

 

users. Each

system

 

 

 

 

 

 

 

 

 

are

 

local

LUs,

 

 

 

 

user is a member of

 

at

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

least

one

group. When

the

 

identity

of

a

group

 

is

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

A partner LU might or might not be on the same s

associated

with

a

process,

a

group

ID

value

 

 

is

referred

 

 

 

both

LUs

are

on

the

same

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

as

 

 

the

 

local

LU. When

to

as

 

a

real

 

group

ID,

an

effective

group

ID,

one

of

the

 

 

which

communication is initia

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

system,

 

the

LU

 

through

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

 

Glossary

 

67

 

 

 

 

Page 91
Image 91
IBM GC28-1920-01 manual Seegeneral-use programming, Seeinventory