Basic Definition Mode

Two security checks are performed for different entities:

• The first check verifies that the user is authorized to use the specific environment procedure for execution of a DO TSO or DO KSL statement. The environment is determined by subparameter INITPROC of the DO TSO/KSL statement. IOA issues a security check to verify authorization in which the CLASS checked is FACILITY and the entity checked is:

  $$CTOPRC.qname.env‑prc

• The second check verifies that the user is authorized to execute the specific DO TSO, DO KSL, or DO SHELL statement. IOA issues a security check to verify authorization in which the CLASS checked is FACILITY and the entities checked are:

  DO TSO
  $$CTOTSO.qname.command‑text

  DO KSL
  $$CTOKSL.qname.command‑text

  DO SHELL
  $$CTOSHL.qname.command text

  In the above entities, command‑text represents the first 21 characters of the command text. Note the following regarding text of commands within these entities:

  • Multiple non‑alphanumeric characters are replaced by one period.
  • The period at the end of the text is dropped.
  • All non‑alphanumeric characters (blanks, commas, and so on) are replaced by periods.

For more details and examples, see the description of the IOASE12 IOA security module in Chapter 1, "IOA Security."