Start of change

Specify an authorization list

This topic explains how to secure volumes with an authorization list during the import process.

The authorization list (AUTL) parameter on the Add Optical Cartridge (ADDOPTCTG) command allows the volumes being imported into an optical media library to be automatically secured with an authorization list as part of the import processing.

If no authorization list is specified for a new optical volume (one that has not been removed with the VOLOPT(*KEEP) option), the default optical authorization list (QOPTSEC) is used to secure the volume. If the volume was removed with the VOLOPT(*KEEP) option, the authorization list that previously secured the volume is used to secure the volume.

The user that adds the optical cartridge does not need to have any authority to the data on the volume being secured by the authorization list, as long as the user is not overriding the authorization list that previously secured a volume that was removed with the VOLOPT(*KEEP) option.

This method is different from the way authorization lists are used to secure system objects. For example, a system operator should be able to add the PAYROLL optical disk to the optical media library and secure it with the PAYROLL authorization list, but not be able to access the data on the PAYROLL optical disk.

To change the authorization list used to secure an optical volume that was previously removed with the VOLOPT(*KEEP) option, the user issuing the ADDOPTCTG command must have either *AUTLMGT authority to the authorization list that previously secured the volume or *ALLOBJ special authority.

Use authorization list assignment and the Add Optical Server (ADDOPTSRV) command

The Add Optical Server (ADDOPTSRV) command secures all volumes in the server with the default optical authorization list (QOPTSEC). The default optical authorization list is used unless a volume was previously secured with a different authorization list and then removed using the VOLOPT(*KEEP) option on the Remove Optical Server (RMVOPTSVR) command.

End of change