Customizing to protect update functions in ZDT/CICS

You can protect update functions in ZDT/CICS by means of the facility class FILEM.CICS.UPDATE, together with the SEC option in HFM3POPT.

If you set SEC=YES in HFM3POPT and then give or deny users access to the FILEM.CICS.UPDATE facility class, you can protect the following functions when running ZDT/CICS.
DSC
Data set copy
CDE
CICSĀ® transient data edit
CFE
CICS file edit
CTE
CICS temporary storage edit
DSE
Data set edit
DSEB
Data set edit batch
DSG
Data set create
DSU
Data set update
FCH
Find/change - only protected if the function attempts the update command

The normal security checking of FILEM.FUNCTION.function_code applies to these functions when SEC=YES has been specified in HFM3POPT. If you do not specify SEC=YES, then no checking is done for these functions.