Activating CA IDMS Security › How to Generate the SRTT

How to Generate the SRTT

The #SECRTT Macro

You generate a new SRTT by using the #SECRTT macro:

1. The first #SECRTT macro initializes SRTT values for all CA IDMS resources.

   The value of the TYPE parameter on the first macro must be INITIAL.

2. One or more additional #SECRTT macros to override initial values.

   The value of the TYPE parameter on these macros must be ENTRY if the security option is for a resource type (or OCCURRENCE if the security option is for an individual occurrence of a database, task, or program).

   If you specify SECBY=EXTERNAL, you must also specify the following:

   • The external resource class that you have defined in the external security system as the equivalent of the CA IDMS resource type.
   • The external resource name format that you have defined in the external security system for identifying the CA IDMS resource.
3. The final #SECRTT indicates that the table is to be generated with values as specified by the preceding macros in the series.

   The value of the TYPE parameter on the last macro must be FINAL.

#SECRTT Assembly

The table is generated and linked only if each #SECRTT statement in the series assembles without error. If one or more statements receives an error, only a listing results.

Note: For complete documentation of the #SECRTT, see #SECRTT.

The RHDCSRTT module should be linked into a secure dataset to prevent unwarranted access to or manipulation of the security system.

#SECRTT Macro Example

#SECRTT TYPE=INITIAL,                                         X
        ENVNAME=TEST,                                         X
        SVCNUM=235

#SECRTT TYPE=OCCURRENCE,                                      X
        RESTYPE=DB,                                           X
        RESNAME='CUSTDB',                                     X
        SECBY=INTERNAL

#SECRTT TYPE=ENTRY,                                           X
        RESTYPE=SYST,                                         X
        SECBY=INTERNAL

#SECRTT TYPE=ENTRY,                                           X
        RESTYPE=SGON,                                         X
        SECBY=EXTERNAL,                                       X
        EXTCLS='SYSTEM',                                      X
        EXTNAME=(RESNAME)

#SECRTT TYPE=ENTRY,                                           X
        RESTYPE=TASK,                                         X
        SECBY=INTERNAL

#SECRTT TYPE=ENTRY,                                           X
        RESTYPE=SPGM,                                         X
        SECBY=EXTERNAL,                                       X
        EXTCLS='PROGRAM',                                     X
        EXTNAME=(RESNAME)

#SECRTT TYPE=OCCURRENCE,                                      X
        RESTYPE=SPGM,                                         X
        RESNAME='RHDCBYE',                                    X
        SECBY=OFF

#SECRTT TYPE=FINAL

END

Notes on the Example

• TYPE=INITIAL begins the SRTT definition.
• ENVNAME=TEST provides a default name qualifier that you can use in constructing an external resource name.
• SVCNUM=235 specifies the SVC number defined at install time.
• TYPE=OCCURRENCE signifies an occurrence override.

  In this case:

  • Resource checks for database CUSTDB and associated schemas, tables, and access modules will be processed by internal security; all other databases and their resources are unsecured.
  • Resource checks for program RHDCBYE will not be routed to the external system, but resource checks for all other programs will be routed to the external security system.
• Resource checks on system resources (RESTYPE=SYST) will be processed by internal security, but signon processing (including password validation) will be processed by the external security system.
• TYPE=FINAL ends the SRTT.

Note: For more information about #SECRTT usage and #SECRTT syntax, see the chapter Syntax for Assembler Macros.