> If RACF defers to you, what do you do? Also, you can use generic profiles > to, for example, deny access to all tapes except those specifically > defined and PERMITed.
Continue with "normal" VM:Tape authorization processing, which includes calling the USERSECR EXIT if the site has coded one and specified to do so, to determine if the requestor issue the command and/or access the resource. JR (Steven) Imler CA Senior Software Engineer Tel: +1 703 708 3479 Fax: +1 703 708 3267 [EMAIL PROTECTED]