Secure database object resources not found in SECRTT or found to be secured internally, through the external security manager (ESM) chosen by the organization (e.g., TSS, ACF 2, RACF). Users, groups, roles, etc., are defined to the ESM, and it is here where the authorization for ownership is determined. Once externally secured, create or modify the #SECRTT entries specify TYPE=ENTRY and TYPE=OCCURRENCE for the database resource type with the parameter of SECBY=EXTERNAL. Use the RESTYPE DB which implicitly includes the subtypes AREA, NRU, QSCH, NSCH, TABL, DACC, and SACC. For each subtype, an entry must be added. The restypes for database tables and DMCLs are DBTB and DMCL, respectively.
Update the #SECRTT macro to contain the following entries:
#SECRTT TYPE=ENTRY,
RESTYPE=UPRF, X
SECBY=EXTERNAL, X
Additional parameters required
#SECRTT TYPE=OCCURRENCE, X
RESNAME='SYSUSER', X
RESTYPE=DB, X
SECBY=EXTERNAL, X
Additional parameters required
#SECRTT TYPE=OCCURRENCE, X
RESTYPE=DB, X
RESNAME='SYSTEM', X
SECBY=EXTERNAL, X
Additional parameters required
#SECRTT TYPE=OCCURRENCE, X
RESTYPE=DB, X
RESNAME='SYSMSG', X
SECBY=EXTERNAL, X
Additional parameters required
#SECRTT TYPE=OCCURRENCE, X
RESTYPE=DB, X
RESNAME='CATSYS', X
SECBY=EXTERNAL, X
Additional parameters required
For batch jobs that access database objects, use the ESM standard dataset security and/or the user-written exit 14 to secure the database objects.