Unprotected functions and profile names for protected functions

Table 1, Table 2, and Table 3, show Z Data Tools functions with their descriptions and (where applicable) the equivalent Z Data Tools panel you can use under ISPF.

Table 1 lists the functions that cannot be protected by RACF® or an equivalent security product, or by the HFMSECUR exit.

However there are exceptions to this. Some functions listed in Table 1 can be protected in Z Data Tools base function by the facility class FILEM.BASE.UPDATE when the option SEC=YES is specified in HFM0POPT. These functions are indicated in Table 1 by ✓ in the fourth column.

Similarly these functions (and others) can be protected in ZDT/CICS by the facility class FILEM.CICS.UPDATE, when SEC=YES is specified in HFM3POPT. For more information about protecting the CICS® functions, see Customizing to protect update functions in ZDT/CICS.

The normal security checking of FILEM.FUNCTION.function_code applies to these functions when SEC=YES has been specified in HFM0POPT, HFM2POPT, or HFM3POPT.

Functions not listed in Table 1 are protected, and Table 3 shows the profile name used in the FACILITY class to protect a specific function.

All protected functions not listed in Table 3 are protected by the FILEM.OTHER.ALL profile.

In particular, the Z Data Tools functions listed in Table 2 are protected by default when you receive Z Data Tools. They are protected by the profile "FILEM.OTHER.ALL", and if you want to use these functions, you must first give the users access to these functions, by defining the profile "FILEM.OTHER.ALL" to RACF or your equivalent security product.

For information on Z Data Tools profiles, and defining them to your security product, see Setting up the security environment by using RACF or an equivalent security product. In particular, if you use a non-IBM security product, see the warning in Controlling access to Z Data Tools functions with SAF.

Note: In Table 3, where more than one function code is listed for the same function, and the first function code is in bold letters, you should use this function code when defining the relevant function profile.
Table 1. Z Data Tools unprotected functions
Function Equivalent
panel
Description Protect with SEC=YES
AF   Template Workbench  
APB 3.7 AFP Print Browse  
AUD   Print Audit Trail  
BTB   Batch template build  
BTU   Batch template update  
CLM 3.11.2 Load module compare  
DSC, COPY 3.3 Copy Utility
DSE 2 Data Set Edit
DSEB   Data Set Edit (batch)
DSG 3.1 Data Create Utility
DSI 3.4 I Data Set Information  
DSM, DSCMP 3.11.1 Data Set Compare  
DSP 3.2 Print Utility  
DSU   Data Set Update (batch)
DSV 1 Data Set View  
DSX 5.6 Data Set Extents  
DVT 3.5 Display VTOC  
DX   Decimal to hex conversion  
FCH 3.6 Find/Change Utility
FMT 3.0 Set DBCS Format  
LVL   Show Z Data Tools Release and PTF Level  
MB, TST 3.8 Memory Browse  
NEW, NEWS   Show Z Data Tools Release News  
NODF, NOSORT   Do not use DFSORT  
PB 3.9 Print Browse  
PBK   Print/view copybook  
SCS 3.4 Catalog Services  
SET   Set Z Data Tools Processing Options  
VER   Show Z Data Tools Release and PTF Level  
VLM   View Load Module  
XD   Hex to decimal conversion  
(none)   Template Functions  
Table 2. Z Data Tools functions protected by FILEM.OTHER.ALL
Function Equivalent
panel
Description Profile
BSF 4.15.1 Backward space file (tape) FILEM.OTHER.ALL
BSR 4.15.3 Backward space record (tape) FILEM.OTHER.ALL
DVB 5.8 Data in virtual browse FILEM.OTHER.ALL
FSF 4.15.2 Forward space file (tape) FILEM.OTHER.ALL
FSR 4.15.4 Forward space record (tape) FILEM.OTHER.ALL
OB 6.2 Object browse FILEM.OTHER.ALL
ODL 6.1 Object directory list FILEM.OTHER.ALL
OP 6.3 Object print FILEM.OTHER.ALL
OQ, OS 6.6.2 Object to sequential data FILEM.OTHER.ALL
OV 6.6.1 Object to VSAM FILEM.OTHER.ALL
REW 4.15.5 Rewind (tape) FILEM.OTHER.ALL
RUN 4.15.6 Rewind and unload (tape) FILEM.OTHER.ALL
VX   VSAM to REXX stem FILEM.OTHER.ALL
XV   REXX stem to VSAM FILEM.OTHER.ALL
Table 3. Z Data Tools function to profile name cross-reference
Function Equivalent
panel
Description Profile
(none)   Using BLP for tape processing FILEM.TAPE.BLP
(none)   Handling full disk packs FILEM.DISK.FULLPACK
BT 4.7 Create Tape File FILEM.TAPE.OUTPUT
DB 5.1 Disk Browse FILEM.DISK.INPUT
DCN   Disk to console FILEM.DISK.INPUT
DP 5.3 Disk Print FILEM.DISK.INPUT
DRS 5.4 Disk Record Scan FILEM.DISK.INPUT
DTE 5.2 Disk Track Edit FILEM.DISK.UPDATE
EOF 5.5 Write EOF Record FILEM.DISK.UPDATE
ERT 4.13 Erase Tape FILEM.TAPE.UPDATE
EVC 4.2.8 Exported Stacked Volume Copy FILEM.TAPE.DUPLICATE
EVL 4.14 Exported Stacked Volume List FILEM.TAPE.INPUT
HT   HFS to tape FILEM.TAPE.OUTPUT
INT 4.12 Initialize Tape FILEM.TAPE.UPDATE
LMU 2 Load module edit/update FILEM.LOADMOD.UPDATE
OE 6.5 Object Erase FILEM.OAM.UPDATE
OO 6.6.5 Object to Object FILEM.OAM.OUTPUT
OU 6.4 Object Update FILEM.OAM.UPDATE
QO, SO, TLO 6.6.4 Sequential Data to Object FILEM.OAM.OUTPUT
QT, ST, STP 4.2.7 Sequential Data to Tape FILEM.TAPE.OUTPUT
TB 4.1 Tape Browse FILEM.TAPE.INPUT
TC   Tape to card FILEM.TAPE.INPUT
TCN   Tape to console FILEM.TAPE.INPUT
TDL   Tape data set list FILEM.TAPE.INPUT
TH   Tape to HFS FILEM.TAPE.INPUT
TLB 4.8 Tape Label Display FILEM.TAPE.INPUT
TLT 4.2.3 Tape to Labeled Tape FILEM.TAPE.DUPLICATE
TMP 4.6 Tape Map FILEM.TAPE.INPUT
TP 4.5 Tape Print FILEM.TAPE.INPUT
TQ, TS, TSQ 4.2.5 Tape to Sequential Data FILEM.TAPE.INPUT
TRL 4.4 Tape Record Load FILEM.TAPE.UPDATE
TRS 4.10 Tape Record Scan FILEM.TAPE.INPUT
TT 4.2.1 Tape to Tape (copy) FILEM.TAPE.DUPLICATE
TTC 4.9 Tape to Tape Compare FILEM.TAPE.INPUT
TTR 4.2.2 Tape to Tape Reblocked FILEM.TAPE.DUPLICATE
TU 4.3 Tape Update FILEM.TAPE.UPDATE
TV, TVS 4.2.4 Tape to VSAM FILEM.TAPE.INPUT
TX   Tape to REXX Variable FILEM.TAPE.INPUT
VO 6.6.3 VSAM to Object FILEM.OAM.OUTPUT
VRU   Update VSAM record FILEM.VSAM.UPDATE
VT, VTP 4.2.6 VSAM to Tape FILEM.TAPE.OUTPUT
VU 5.7 VSAM Update FILEM.VSAM.UPDATE
WTM 4.11 Write Tape Mark FILEM.TAPE.UPDATE
XT   REXX Variable to Tape FILEM.TAPE.OUTPUT
Others   Protects all functions not otherwise listed in Table 1 or this table. FILEM.OTHER.ALL