CICS itself uses a number of queues. These queues are defined in the sample group, DFHDCTG. If you want to protect access to these definitions from
user application programs, define them to RACF with UACC(NONE) and without
an access list. In the sample table, most of the queue names are indirect,
pointing to the final queues: CPLI, CSSL, or CCSO. Therefore, if you use
the definitions as supplied, you need define to RACF only the queue names
CPLI, CSSL, and CCSO, as follows:
RDEFINE ECICSDCT CICSQUEUES UACC(NONE)
ADDMEM(CPLI, CSSL, CCSO)
NOTIFY(sys_admin_userid)