Keywords › FOR Keyword—Specify ACID's or Permission's Life

FOR Keyword—Specify ACID's or Permission's Life

Valid on z/OS, z/VM, and z/VSE.

Use the FOR keyword to:

• Specify the number of days that an ACID may be used before it expires
• With SUSPEND to specify a period of time during which an ACID is suspended
• Specify the number of days that the ACID is permitted to access the resource

This keyword has the following format:

TSS PERMIT|ADDTO(acid) FOR(nnn)

nnn

The number of days until the ACID can be used for. Use 0 for no expiration.

Range: 0 to 255

This keyword is used with:

• The commands CREATE, PERMIT, REPLACE, ADDTO, REVOKE, and REMOVE
• The ACID types User, DCA, VCA, ZCA, LSCA, SCA, and MSCA
• ACID(MAINTAIN) authority

Note: When used with SUSPEND, administrators must also have MISC1(SUSPEND) authority.

FOR Related Keywords

Note the following related keywords:

• FOR and UNTIL are mutually exclusive.
• Use the SUSPEND keyword with FOR to specify a time period during which an ACID is suspended.
• To REMOVE the expiration interval use:

  TSS REMOVE(acid) EXPIRE
  

• You cannot REMOVE the FOR attribute from a facility, remove the facility from the ACID:

  TSS REMOVE(acid) FACILITY(facility)
  

Expired Access

When a resource permission expires, the permission is ignored by the CA Top Secret search algorithm. The TSS LIST function automatically removes the expired resource permission.

Examples: FOR keyword

This example forces an ACID to expire after 5 days:

TSS ADDTO(USER23) FOR(5)

This example totally removes the expiration limit from USER23 and thus reactivate the ACID:

TSS REMOVE(USER23) FOR(5)

This example removes the expiration:

TSS ADDTO(USER23) FOR(0)

If the FOR keyword is ADDed to an ACID in combination with the SUSPEND keyword, the ACID is temporarily suspended for the specified number of days and can then be used again. This example suspends USER23 for 14 days:

TSS ADDTO(USER23) SUSPEND
                  FOR(14)

This example uses the FOR keyword to add PROFILE ACIDs and FACILITY(s) to a user:

TSS ADDTO(USER23) FACILITY(TSO)
                  FOR(5)

Note: When used with a PROFILE or FACILITY, the use of that profile or facility expires, not the ACID itself.

This example indicates that USER01 is allowed READ access (default) to any data set suffixed by .FILE for one day (for the rest of today):

TSS PERMIT(USER01) DSNAME(***.FILE)
                   FOR(1)

This example revokes USER01's access:

TSS REVOKE(USER01) DSNAME(***.FILE)