Previous Topic: CA ACF2

Next Topic: RACF

CA Top Secret

Ensure that users do not keep their own load libraries. If necessary, CA Top Secret users can transfer ownership of their load libraries to their departmental administrator (DCA). You can rename these libraries with a valid department high‑level qualifier, if required:

TSS ADDTO(deptacid) DSN(‘dept.myacid.lib’)

You then grant each user unconditional read and fetch permission to enable access to any program executed by their ACID. You would also grant update permission to each ACID, but only if the update was performed using the linkage editor or IEBCOPY utility programs executed from a secured system library. The TSS commands are:

TSS PERMIT(myacid) DSN(‘dept.myacid.lib’) ACC(READ,FETCH)
TSS PERMIT(myacid) DSN(‘dept.myacid.lib’) ACC(UPDATE
PRIVPGM(IEWL,IEBCOPY) LIB(‘SYS1.LINKLIB’)