CA Top Secret Security

CA PMA Chargeback Security and Audit › CA Top Secret Security

CA Top Secret Security

Classes used by DataManager must be defined to CA Top Secret. This allows CA Top Secret to process security calls from DataManager.

New classes are defined to CA Top Secret by adding them to the Resource Definition Table (RDT) via the TSS command. Once added, they are immediately accessible. No restart, reinitialization, or IPL is required.

The new classes and their associated access levels for DataManager are:

DataManager Component	Security Class	Access Levels
Dialog	ACDIALOG	READ and WRITE
Panel	ACPANEL	READ and WRITE
SQL	ACSQL	READ and WRITE

Note: Tables, views, indexes, etc., are controlled by the database security. If you do have a security package that controls database objects, you must set up security according to the rules of the security package.

You can list your current RDT via the TSS LIST(RDT) command to verify that these classes are not already defined. If they are defined, you may proceed with protecting and permitting these new resources.

To add these classes, you must select eight unused resource codes. These codes must be in the hexadecimal range from 01 to 3F.

The following sample commands show the exact TSS command syntax for defining these new classes. In these examples, the resource codes of 38 through 3F have been selected.

To add resource class:

ACDIALOG    TSS ADDTO(RDT) RESCLASS(ACDIALOG) RESCODE(3A) -
                ATTR(LONG) DEFACC(READ=20)
ACPANEL     TSS ADDTO(RDT) RESCLASS(ACPANEL) RESCODE(3D) -
                ACLST(READ=20,WRITE=40,ALL,NONE) -
                ATTR(LONG) DEFACC(READ=20)
ACSQL       TSS ADDTO(RDT) RESCLASS(ACSQL) RESCODE(3F) -
                ACLST(READ=20,WRITE=40,ALL,NONE,) -
                ATTR(LONG) DEFACC(READ=20)