Resources › GEJBROLE Resource Class—Secure z/OS Enterprise Beans

GEJBROLE Resource Class—Secure z/OS Enterprise Beans

Valid on z/OS.

Use the EJBROLE or GEJBROLE classes in CA Top Secret to control access to enterprise beans for a client.

The administrator can use any of the following methods to control access to EJBROLE and GEJBROLE resources: Expiration, Facility, Program Pathing, Time/Day, and Actions.

The administrator can use Expiration, Facility, Program Pathing, Time/Day, and Actions methods to control access to APPCLU resources.

When used with the ADDTO/REMOVE commands, this resource class has the following format:

TSS REMOVE(acidname) EJBROLE(rolename)
TSS REMOVE(acidname) GEJBROLE(rolename)

Prefix length

2 to 26 characters.

Capacity of list

One to eight prefixes per TSS command.

When used with the PERMIT/REVOKE commands, this resource class has the following format:

TSS REVOKE(acidname) EJBROLE(rolename)
TSS REMOVE(acidname) GEJBROLE(rolename)

Prefix length

2 to 245 characters

Capacity of list

One to eight prefixes per command.

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS.
• The ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• EJBROLE (OWN) authority to ADD or REMOVE ownership of EJBROLE resources
• EJBROLE(XAUTH) authority to PERMIT or REVOKE access to EJBROLE resources
• GEJBROLE (OWN) authority to ADD or REMOVE ownership of GEJBROLE resources
• GEJBROLE(XAUTH) authority to PERMIT or REVOKE access to GEJBROLE resources

Examples:

This example protects the resource with CA Top Secret by assigning ownership to the Corporate Department(owning acid). The administration can then PERMIT access to users or profiles that require access.

TSS ADDTO(CORPORAT) GEJBROLE(ROLE)

TSS ADDTO(CORPORAT) EJBROLE(ROLE)

This example permits users in the Technical Services Department to access GEJBROLE(ROLE2):

TSS PERMIT(TECHPROF) GEJBROLE(ROLE2)

This example permits users in the Technical Services Department to access EJBROLE(ROLE1) on Fridays only:

TSS PERMIT(TECHPROF) EJBROLE(ROLE1) DAYS(FRIDAY)