Security requirements primarily depend on how you set the first parameter of the SECURITY statement in the DBMOVER configuration member on the z/OS system.
If you set the first parameter of the SECURITY statement to 1 or 2, the PowerExchange Listener must run APF-authorized. However, IDMS load libraries are usually
not
APF-authorized. To handle this situation, use either of the following methods:
Run the XIDIDM10 job during PowerExchange installation, and APF-authorize the copies of the IDMS load libraries that the XIDIDM10 job creates. Then verify that these libraries are specified in the PowerExchange Listener STEPLIB DD statement.
Set the PC_AUTH statement to Y in the DBMOVER configuration member on the z/OS system. This setting causes PowerExchange to use the PowerExchange-supplied MVS Program Call (PC) services routine to get the authorization that the PowerExchange Listener requires to access DBMS load libraries. You must define the DBMS load libraries in the DTLLOAD DD statement, instead of in the STEPLIB DD statement. If you use netport jobs to access data, define the load libraries in the DTLLOAD DD statement of the netport JCL.
Use this method if you do not want to maintain APF-authorized copies of the IDMS load libraries or if you need to run non-authorized user programs.
If you set the first parameter of the SECURITY statement to 2, you must also set up a netport job for each IDMS bulk data request for security checking to be properly performed.
If you set the first parameter of the SECURITY statement to 0, the PowerExchange Listener does not need to run APF-authorized. In the STEPLIB DD statement of the PowerExchange Listener JCL, you can specify the IDMS load libraries rather than the PowerExchange copies of these libraries.
Some DBMOVER configuration statements other than SECURITY, for example, STATS, might require some functions to be APF-authorized.