Setting Up File Transfer Resources › How to Set Up SAF Access for TCPAccess Policy Rule Sets

How to Set Up SAF Access for TCPAccess Policy Rule Sets

Note: This section applies only if you use CA TCPaccess FTP Server.

To maintain policy rule sets, the user ID attempting to update the rule set must be associated with a new SAF facility, $SOLVE.FTP.CONTROL, that must be defined to your security system.

The user’s access to this facility determines the user’s access to policy rule sets as follows:

• Read access allows the user to view policy rule sets.
• Update access allows the user to both view and maintain policy rule sets.

The following sequence of events illustrates how the facility and a user ID are associated:

1. You define user FTPUSER to your security system.
2. You define a SAF facility to your security system.
3. You associate user FTPUSER to the SAF facility and give the user update access.
4. When FTPUSER user accesses the FTP policy rule set list panel a SAF call is made to ensure that FTPUSER has access to the $SOLVE.FTP.CONTROL facility and then to determine the authority of the user. In this example, the user has update authority.