Controlling the Use of FTP › How to Set Up a SAF Qualifier Under CA Top Secret for z/OS

How to Set Up a SAF Qualifier Under CA Top Secret for z/OS

To set up a SAF qualifier under CA Top Secret for z/OS

1. Define the class.

   Note: $FTP is the default class name for FTP SAF rules. If you have used a different class name in the FTPCNTL parameter group, then use the new name instead of $FTP in the commands shown here.

   TSS ADD(RDT) RESCL($FTP) RESCODE(xx) ACLST(WRITE,READ)
   ATTR(DEFPROT,LONG,GENERIC).
   

   Note: Resource code can be a hex value from 01-3F. Select a unique value. To determine if code xx is already in use, you can issue the command TSS LIST(RDT) RESCODE(xx).

2. Define ownership.

   TSS ADD(department-id) $FTP(FTP.)

3. Permit access to specific rules, as required. You can permit access for a user ID, a group of users, or a user profile, as appropriate to your organization.

   To permit access for a user ID:

   TSS PER(userid) $FTP(FTP.saf-qualifier.10.11.12.13.filename) ACCESS (READ)
   

   Note: The $FTP parameter is restricted to a maximum of 44 characters.

   To permit access for a user profile:

   TSS PER(profile) $FTP(FTP.saf-qualifier1.) ACCESS(WRITE)