The PlatformSecurityService implementation works well with DATASET resource class and can be used to check access to MVS datasets.
Implementation tips:
Use assembler code that calls RACROUTE REQUEST=AUTH macro
Call the assembler code from new JNI function in the zowe-sdk-secur module. This module is program-controlled so it can use RACROUTE REQUEST=AUTH functionality
The PlatformAccessControl class and its underlying implementation __check_resource_auth_np() support the general resources only. In particular, the class can not specify
DATASET
.But checking access to
DATASET
can be useful.Acceptance criteria:
PlatformSecurityService
implementation works well withDATASET
resource class and can be used to check access to MVS datasets.Implementation tips:
RACROUTE REQUEST=AUTH
macrozowe-sdk-secur
module. This module is program-controlled so it can useRACROUTE REQUEST=AUTH
functionality