E-PAL

The E-PAL architecture is centered around several key components: the ISPF interface, batch job processing, the E-PAL database, and integration with RACF or CA ACF2. The ISPF interface provides a user-friendly environment for managing access requests, reviewing logs, and generating reports. Batch jobs are used to automate tasks such as processing access requests, generating audit trails, and managing the E-PAL database.

The E-PAL database stores information about users, datasets, and access permissions. It is crucial for defining and enforcing access rules. The system integrates with RACF or CA ACF2 to validate user identities and authorize access to resources.

Communication between components occurs through various mechanisms. The ISPF interface interacts with the E-PAL database and batch jobs through commands and data exchange. Batch jobs process access requests and update the E-PAL database.

The system uses SMF records for detailed auditing of all access events. The E-PAL database is a key component, storing all access rules and user permissions. The system does not expose any direct APIs.

The main network requirement is connectivity to the z/OS system where RACF or CA ACF2 is running. E-PAL's design allows for temporary access without modifying the underlying security infrastructure. However, it is important to note that E-PAL is no longer supported.