IBM OS/390 manual Batch Keywords that are Not Recommended, DITTO/ESA Security

20.6 Batch Keywords that are Not Recommended

The following table lists obsolete keywords from previous releases of DITTO that are still recognized by DITTO/ESA in batch mode. It is recommended that you use the indicated replacement, if any.

Function(s)	Keyword	Description	Replacement
BS, BT, CS, CT, FT, SS, ST, TFT,	BLKFACTOR=	Output blocking factor	RECFMOUT=
TS, TTR, VS, VT			B L K S I Z E =
TF	BLKFACTOR=	Output blocking factor	-
BS, CS, SS, TS, VS	CISIZE=	FBA control interval size	B L K S I Z E =
FT	M O D E =	Input record format	-
SP (VSE, CMS), SS, ST (VSE,	M O D E =	Input record format	RECFMIN=
CMS), SV, TC, TF, TFT, TRS, TS,
TTR, TV
BT, CT, ST (MVS), VS, VT	M O D E =	Output record format	RECFMOUT=
TTR	O U T M O D E =	Output record format	RECFMOUT=
TP, TRS	N B L K S =	Number of blocks	NLRECS=
FT	RECSIZE=	Record length for deblocking	-
VC, VL, VP, VRU, VS, VT, VV	S T A R T = K	VSAM start positioning by key	K E Y = k e y
	POSITION=key	value
SET	TSOPRINT=	Print output destination	PRINTOUT=
SET	ASCII=YES	Translate from ASCII to EBCDIC	A S C I I = I N

Notes:

1. For the SP function, the MODE keyword is obsolete under VSE and CMS but still applies under MVS.

2. For the ST function, the MODE keyword is obsolete. Under VSE and CMS, use RECFMIN; under MVS, use

RECFMOUT.

20.7 DITTO/ESA Security

DITTO provides secure control of function authorization, either through RACF (or an equivalent security product) or through the DITSECUR exit.

DITSECUR is a customizable exit. It provides a DITS macro, which lets you define a table of user names or job names, DITTO-protectable resources (called profiles), and access levels.

OS/390, MVS, or CMS: If OS/390 Security Server, RACF 1.9 or later (or equivalent) is active, the System Authorization Facility (SAF) with the DITTO enhanced security facility is used for access control and authorization verification. Authorization is controlled by DITTO-specific profiles in the FACILITY class. If SAF with RACF 1.9 is not active at DITTO initialization time, all DITTO special security checks during that DITTO session are passed to the DITSECUR user exit (if any) instead of to SAF; if the DITSECUR module cannot be found, no security checks are done.

VSE: All DITTO special security checks during a DITTO session are passed to the DITSECUR user exit. If the DITSECUR module cannot be found, no security checks are done.

Chapter 20. DITTO 385