SDSF 2.5+ will use SAF instead of internal (ISFPRMxx / ISFPARMS) security. There is a recent presentation on how SDSF 2.5 security works with SAF in the IBM Education GitHub :
github.com/IBM/IBM-Z-zOS/tree/main/zOS-Education/ If you have migrated from non-SAF to SAF security, there is quite a lot of migration considerations especially if you have not previously activated the OPERCMDS and JESSPOOL classes. Other customization options in the ISFPRMxx GROUP statement should behave as previously. One thing to check is that users are being placed into their expected SDSF groups as the selection criteria is now ONLY that they have SAF READ access to the SDSF class profile “GROUP.name.server”. Previously criteria like userid or TSO logon proc name are no longer used. Do you have specific issues that you can expand on ? Rob Scott Rocket Software From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of roscoe5 Sent: Tuesday, November 26, 2024 2:28 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: SDSF and RACF/SAF w z/OS 2.5 EXTERNAL EMAIL Hello, Friends recently upgraded 2.4 to 2.5, and found that some previous controls (eg.AUPDT) no longer work as before. I said I believe those controls moved from parmlib to RACF. We’re getting mixed feedback on that theory. What say you? Am I half right/wrong? Are there exits, mods, exceptions, caveats, etc. that should be considered? Thanks much! R. (May also post in RACF.) Sent from [Proton Mail](https://proton.me/mail/home<https://proton.me/mail/home>) for iOS ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with the message: INFO IBM-MAIN ================================ Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ Main Office Toll Free Number: +1 855.577.4323 Contact Customer Support: https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - http://www.rocketsoftware.com/manage-your-email-preferences Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy ================================ This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
