Setting Up Resource Classes

Using External Security for CA Datacom › Setting Up Resource Classes

Setting Up Resource Classes

This section provides information about resource class names and formats for securing the CA Datacom products in CA ACF2, CA Top Secret, or IBM's RACF.

CA Datacom products share the following CA Datacom resource classes in the external security products. The external security product controls the user access rights and levels. The method used to tie the user to functions or data depends on the security product used.

Resource Class Names

The resource class names used in this chapter represent generic names. Your specific external security product may use slightly different resource class, or resource type, names.

For CA ACF2, see Security Interfaces, CA-ACF2 (z/OS and z/VSE).
For CA Top Secret, see Security Interfaces, CA Top Secret (z/OS).
For IBM RACF, see Security Interfaces, RACF.

Type of Information	Resource Class	Products Using	Access Levels
System	DTSYSTEM	CA Datacom/DB CA Datacom Datadictionary CA Dataquery CA Datacom/DB SQL Option	None
Administrator	DTADMIN	CA Datacom/DB CA Datacom Datadictionary CA Datacom/DB SQL Option	None
Table	DTTABLE DCTABLE DFTABLE DGTABLE DHTABLE DPTABLE DQTABLE DRTABLE DSTABLE DXTABLE	CA Datacom/DB CA Datacom/DB SQL Option CA Dataquery	READ ADD UPDATE DELETE
Utility	DTUTIL	CA Datacom/DB CA Datacom Datadictionary CA Dataquery CA Datacom/DB SQL Option	None

The following apply to conventions used for CA Datacom and in this chapter:

Resource names contain no embedded blanks.
Uppercase values are constants in the resource name.
Lowercase values indicate variables.
The system identifier is the CA Datacom/DB Directory (CXX) name unique to each system. If two or more MUFs share the same Directory, they share the same CXX name.
DDutility and DQutility represent a number of possible product programs or functions.

Some external security products allow you to use prefixing, masking, and patterning techniques. These can include fixed position character substitution, or wildcards, and variable character substitution, or masking, when defining resources. Some products also allow you to define profiles and then assign users to specific profiles for permissions. These techniques allow you to reduce the number of resource definitions. See your external security product documentation for the availability and use of these features.