The COBOL program accesses DB2 tables and VSAM files under the mapped user ID. RACF controls access at the table and dataset level.