Implementing Security › Securing the CSD Command

Securing the CSD Command

CICS TS 4.1 supports a new CSD command that you may use to directly update the CICS/TS CSD file without the use of the CEDA transaction. You can secure the CSD command using the CA Top Secret SPI resource.

The general syntax for the IBM EXEC CICS command is:

EXEC CICS CSD function option(argument)

CA Top Secret protects the EXEC CICS CSD command by providing equivalent SPI access levels for the EXEC CICS CSD function options. CA Top Secret secures the EXEC CICS CSD command using two commands:

• TSS ADD the CSD SPI resource to a department or division ACID.
• TSS PERMIT the user ACID and include the appropriate CSD SPI access level.

The equivalent CA Top Secret commands for the IBM EXEC CICS CSD commands shown are as follows:

TSS ADDTO(deptacid) SPI(CSD)
TSS PERMIT(acid) SPI(CSD) ACCESS(accesslevel)

Granting a user an SPI(CSD) access level lets them use all of the functions requiring that level of access.

CSD Command Access Levels

The CSD command functions and their Access Levels are as follows: