Secure write surface gate
Keep insert, update, delete, and create-dataset closed until a static setting or an authorization token opens them. RACF still applies to every call.
A RACF login proves who is calling. It does not by itself open a write path from HTTP. The write surface is a second control, off by default, on top of RACF. OL CoreIQ can pass the token after an administrator allows writes.