allow file access=yes|no
allow spool access=yes|no
allow catalog access=yes|no
allow COBOL file service=yes|no
allow lock service=yes|no
allow API documentation=yes|no
Parameters:
- allow
feature
- If the option is set to
yes, the specified feature is enabled. If it is set to
no, the feature is disabled.
The available features are:
- file access
- Access to regular files using filesystem paths, possibly mapped using allow rules.
- spool access
- Access to spooled output datasets created by JES jobs.
- catalog access
- Access to cataloged datasets.
- COBOL file service
- Access to the COBOL file service, which is used by the IDE-hosted COBOL data file editor.
- lock service
- Access to the enterprise server spool/catalog lock service. This must be enabled for spool and catalog access; if it is disabled,
those features will also be disabled.
- API documentation
- Access to the online RFA API documentation through the RFA listener.
Properties:
- Default:
- yes (all features are enabled)
- Values:
- yes, no
Comments:
For
enterprise server instance with one or more RFA listeners, you can use these configuration settings to disable features you do not need. Doing so improves
security.
Example:
[Security]
allow COBOL file service=no
allow API documentation=no