How can I avoid making a dataset name check for a foreign tape?

Document ID : KB000027975
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:

How can I turn off DSN security checks for foreign tapes:

Environment:

CA 1 12.6 and 14.0

Answer:

If you would like to do data set name security checking but not check the DSN for a foreign tape you can use CA-1's security options.

In CA-1 set OCEOV to YES.
In RACF set TAPEDSN to OFF
In Top Secret set control option TAPE OFF
In ACF2 set GSO options of TAPE-OPEN and TAPE-EOV to NO

With the options set this way CA-1 will issue a security check for all DSNs that are on tapes that are owned by CA-1 (in the TMC) and not for the foreign tapes.