Despite the varied tape security support that RACF and DFSMS DEVSUPxx TAPEAUTHDSN provides, many installations use RACF exits to control access to tape volumes and to tape data sets. Although there are likely to be many different implementations, these are some of the commonly implemented functions:

• Use of the RACHECK exit or the RACDEF exit to test or set the PROTECT=YES option
• Use of the ability to model a TAPEVOL profile on another existing profile; either a model or data set profile
• Use of RACHECK post-processing exit to prevent use of tapes that are not protected by RACF (PROTECTALL for tape)