CA PanAPT Activity Access

Configuring Your Product › Implement External Security Rules › CA PanAPT Activity Access

CA PanAPT Activity Access

When users attempt functions in CA PanAPT, CA PanAPT validates external security first (and if authorization is granted) then validates the internal security system (set up through Control File Maintenance). If authorization is not granted during external security validation, a security error appears and the function is not allowed.

Set up security rules as defined in the following table and set up permits (as applicable) according to your site standards.

An example of a Standard Security Facility (SSF) rule follows:

PANAPTF.system-id.CTLSYS.SYSINFO.CHG

where:

PANAPTF is your high‑level ownership in CA Top Secret or your key in CA‑ACF2.
system-id is the logon system ID when using the User Identification Facility (UIF). If the UIF is not being used, CA PanAPT puts in a dollar sign ($) as the default.
CTLSYS is the activity name.
SYSINFO is the record type.
CHG is the action.

Activity Name	Description and SSF Rule
CTL/ENTRY	Control file maintenance entry: PANAPTF.system-id.CTL
CTLACT/CHG	Control file activity change: PANAPTF.system-id.CTLACT.activity-name.CHG
CTLACT/INQ	Control file activity inquire: PANAPTF.system-id.CTLACT.activity-name.INQ
CTLSYS/ADD	Control file system information add (for adding CA Pan/LCM Configuration Manager Option information): PANAPTF.system-id.CTLSYS.ACCSMTHD.ADD PANAPTF.system-id.CTLSYS.CONFIG.ADD
CTLSYS/CHG	Control file system information change: PANAPTF.system-id.CTLSYS.SYSINFO.CHG PANAPTF.system-id.CTLSYS.SECURITY.CHG PANAPTF.system-id.CTLSYS.VERPROCS.CHG PANAPTF.system-id.CTLSYS.LIBLEVEL.CHG PANAPTF.system-id.CTLSYS.ACCSMTHD.CHG PANAPTF.system-id.CTLSYS.CONFIG.CHG
CTLSYS/DEL	Control file system information delete (for deleting CA Pan/LCM Configuration Manager Option information): PANAPTF.system-id.CTLSYS.ACCSMTHD.DEL PANAPTF.system-id.CTLSYS.CONFIG.DEL
CTLSYS/INQ	Control file system information inquire: PANAPTF.system-id.CTLSYS.SYSINFO.INQ PANAPTF.system-id.CTLSYS.SECURITY.INQ PANAPTF.system-id.CTLSYS.VERPROCS.INQ PANAPTF.system-id.CTLSYS.LIBLEVEL.INQ PANAPTF.system-id.CTLSYS.ACCSMTHD.INQ PANAPTF.system-id.CTLSYS.CONFIG.INQ
CTLUSER/ADD	Control file user ID add: PANAPTF.system-id.CTLUSER.user‑id.ADD
CTLUSER/CHG	Control file user ID change: PANAPTF.system-id.CTLUSER.user‑id.CHG
CTLUSER/DEL	Control file user ID delete: PANAPTF.system-id.CTLUSER.user‑id.DEL
CTLUSER/INQ	Control file user ID inquire: PANAPTF.system-id.CTLUSER.user‑id.INQ
DEV/ENTRY	Development facility entry: PANAPTF.system-id.DEV
DEV/MM	Development modify members command: PANAPTF.system-id.DEV.MM
DEV/PRINTTBL	Development print move request member table: PANAPTF.system-id.DEV.PRINTTBL
DEVADMIN/ENTRY	Project administration entry: PANAPTF.system-id.DEVADMIN
INVENTRY/ADD	Inventory add: PANAPTF.system-id.INVENTRY.name.ADD
INVENTRY/APP	Inventory approve: PANAPTF.system-id.INVENTRY.name.APP
INVENTRY/ASN	Inventory assign: PANAPTF.system-id.INVENTRY.name.ASN
INVENTRY/CHG	Inventory change: PANAPTF.system-id.INVENTRY.name.CHG
INVENTRY/DEL	Inventory delete: PANAPTF.system-id.INVENTRY.name.DEL
INVENTRY/ENTRY	Inventory maintenance entry: PANAPTF.system-id.INVENTRY
INVENTRY/INQ	Inventory inquire: PANAPTF.system-id.INVENTRY.name.INQ
INVENTRY/REL	Inventory release: PANAPTF.system-id.INVENTRY.name.REL
INVENTRY/RET	Inventory assign and retrieve: PANAPTF.system-id.INVENTRY.name.RET
INVENTRY/TRN	Inventory transfer: PANAPTF.system-id.INVENTRY.name.TRN
LIBCODE/ADD	Library code add: PANAPTF.system-id.LIBCODE.libcode/subcode.ADD
LIBCODE/CHG	Library code change: PANAPTF.system-id.LIBCODE.libcode/subcode.CHG
LIBCODE/COP	Library code copy: PANAPTF.system-id.LIBCODE.libcode/subcode.COP
LIBCODE/DEL	Library code delete: PANAPTF.system-id.LIBCODE.libcode/subcode.DEL
LIBCODE/ENTRY	Library code maintenance entry: PANAPTF.system-id.LIBCODE
LIBCODE/INQ	Library code inquire: PANAPTF.system-id.LIBCODE.libcode/subcode.INQ
LIBCODE/SECURITY	Library code view security codes: PANAPTF.system-id.LIBCODE.libcode/subcode.SECURITY
MEMBER/BROWSE	Browse a member: PANAPTF.system-id.MEMBER.member‑name.BROWSE
MEMBER/CHECKIN	Checkin a member: PANAPTF.system-id.MEMBER.member‑name.CHECKIN
MEMBER/CHECKOUT	Checkout a member: PANAPTF.system-id.MEMBER.member‑name.CHECKOUT
MEMBER/COMPARE	Compare members: PANAPTF.system-id.MEMBER.member‑name.COMPARE
MEMBER/COMPILE	Compile a member: PANAPTF.system-id.MEMBER.member‑name.COMPILE
MEMBER/COMPLINK	Compile and link a member: PANAPTF.system-id.MEMBER.member‑name.COMPLINK
MEMBER/EDIT	Edit a member: PANAPTF.system-id.MEMBER.member‑name.EDIT
MEMBER/HISTORY	View member history: PANAPTF.system-id.MEMBER.member‑name.HISTORY
MEMBER/LINK	Link edit a member: PANAPTF.system-id.MEMBER.member‑name.LINK
MEMBER/LISTING	View a member's output listing: PANAPTF.system-id.MEMBER.member‑name.LISTING
MEMBER/MERGE	Merge members: PANAPTF.system-id.MEMBER.member‑name.MERGE
MEMBER/OUTPUTCP	View member compare output: PANAPTF.system-id.MEMBER.member‑name.OUTOUTCP
MEMBER/OUTPUTMG	View member merge output: PANAPTF.system-id.MEMBER.member‑name.OUTOUTMG
MEMBER/UTILITY	Member utilities: PANAPTF.system-id.MEMBER.member‑name.UTILITY
MEMBER/XIR	View member cross reference: PANAPTF.system-id.MEMBER.member‑name.XIR
MOVEREQ/ADD	Move request add: PANAPTF.system-id.MOVEREQ.number.ADD
MOVEREQ/APB-short-name	Move request approve for back out at level short-name: PANAPTF.system-id.MOVEREQ.number.APB-short-name
MOVEREQ/APM-short-name	Move request approve for move at level short-name: PANAPTF.system-id.MOVEREQ.number.APM-short-name
MOVEREQ/BAK	Move request back out: PANAPTF.system-id.MOVEREQ.number.BAK
MOVEREQ/BRO	Move request browse: PANAPTF.system-id.MOVEREQ.number.BRO
MOVEREQ/CHG	Move request change (for move requests being created): PANAPTF.system-id.MOVEREQ.number.CHG
MOVEREQ/CHGAWAPP	Move request change (for move requests awaiting approvals): PANAPTF.system-id.MOVEREQ.number.CHGAWAPP
MOVEREQ/CLO	Move request close: PANAPTF.system-id.MOVEREQ.number.CLO
MOVEREQ/CLOASSGN	Move request assignment test at close: PANAPTF.system-id.MOVEREQ.number.CLOASSGN
MOVEREQ/COP	Copy move request: PANAPTF.system-id.MOVEREQ.number.COP
MOVEREQ/CR	Copy a move request for rework: PANAPTF.system-id.MOVEREQ.number.CR
MOVEREQ/DAT	Move request change date: PANAPTF.system-id.MOVEREQ.number.DAT
MOVEREQ/DEL	Move request change date: PANAPTF.system-id.MOVEREQ.number.DEL
MOVEREQ/DELCLOSD	Move request delete (for closed move requests): PANAPTF.system-id.MOVEREQ.number.DELCLOSD
MOVEREQ/ENTRY	Move request maintenance entry: PANAPTF.system-id.MOVEREQ
MOVEREQ/INQ	Move request inquire: PANAPTF.system-id.MOVEREQ.number.INQ
MOVEREQ/MEMBER	Move request member add: PANAPTF.system-id.MOVEREQ.number.MEMBER.member-name
MOVEREQ/MEMCHG	Move request member change: PANAPTF.system-id.MOVEREQ.number.MEMCHG.member-name
MOVEREQ/MEMDEL	Move request member delete: PANAPTF.system-id.MOVEREQ.number.MEMDEL.member-name
MOVEREQ/MEMPURGE	Move request member purge: PANAPTF.system-id.MOVEREQ.number.MEMPURGE.member-name
MOVEREQ/PRT	Move request print: PANAPTF.system-id.MOVEREQ.number.PRT
MOVEREQ/RVP	Move request run verification: PANAPTF.system-id.MOVEREQ.number.RVP
MOVEREQ/STA	Move request status: PANAPTF.system-id.MOVEREQ.number.STA
PROJECT/ADD	Add a project: PANAPTF.system-id.PROJECT.project.ADD
PROJECT/CHG	Change a project: PANAPTF.system-id.PROJECT.project.CHG
PROJECT/DEL	Delete a project: PANAPTF.system-id.PROJECT.project.DEL
PROJECT/INQ	Project inquiry: PANAPTF.system-id.PROJECT.project.INQ
REPORT/APCS5105	Online approval group cross reference report: PANAPTF.system-id.REPORT.APCS5105
REPORT/APCS5104	Online approval category cross reference report: PANAPTF.system-id.REPORT.APCS5104
REPORT/APCS6111	Online assignment report: PANAPTF.system-id.REPORT.APCS6111
REPORT/ENTRY	Online report entry: PANAPTF.system-id.REPORT
USERLIB/CHG	Change user work libraries: PANAPTF.system-id.USERLIB.user‑id.CHG
USERLIB/INQ	User work library inquiry: PANAPTF.system-id.USERLIB.user‑id.INQ