Skip to Content

Restricting AL11

Hi,

How can I restricted a user to seeing only a particular unix directory in AL11? By default all the configured directories can be seen.

I only want the user to see a particular configured directory. I tried specifying the directory name in "Physical file name (filename)" in S_DATASET but it doesn't seem to work.

Thanks in advance.

Add comment
10|10000 characters needed characters exceeded

  • Get RSS Feed

2 Answers

  • Best Answer
    avatar image
    Former Member
    Oct 19, 2008 at 08:11 AM

    Hi,

    Here is the answer for your question.

    First create an alias. Go to t-code AL11 > configure > create alias. Let say we are trying to restrict alias DIR_TEMP which is /tmp. Open PFCG and assign t-code AL11, and change the authorization for S_DATASET as mentioned below

    Activity 33

    Physical file name /tmp/*

    Program Name with Search Help *

    Regards

    Anandm

    Add comment
    10|10000 characters needed characters exceeded

    • Hi Abhishek,

      Thanks for your reply.

      Basically, it's to restrict "prying" eyes looking into the system.

      I understand the control of S_DATASET but really I just want to limit upfront what the user can see in AL11.

      Regards

  • avatar image
    Former Member
    Oct 17, 2008 at 03:49 AM

    Hi Sisab,

    There is a thread already that talks about your problem:

    al11-access-control

    Hope this helps.

    Regards,

    Kiran Kandepalli.

    Add comment
    10|10000 characters needed characters exceeded

    • Former Member

      Yes, it talks about it but does not really solve it in my opinion.

      Take a read through function module AUTHORITY_CHECK_DATASET which you should call before the file system operation is performed, because the S_DATASET checks (and S_PATH for the directory) are invoked by the OPEN, READ, DELETE DATASET statements themselves, not only by the AUTHORITY-CHECK statement.