Keywords › MASKREC Keyword—MASK Record Name

MASKREC Keyword—MASK Record Name

Valid on z/OS, z/VSE, and z/VM.

Use the MASKREC keyword to:

• Provide a name for a MASK record which CA Top Secret uses in the SDT Record
• To PERMIT or REVOKE a MASK record together with a SELECT statement associated with an FCT.

The administrator can:

• Specify the same access levels associated with an FCT resource: SET, INQUIRE, ALL, BROWSE, DELETE, NONE, READ, and UPDATE.
• Use any of the following methods to control access: Expiration, Facility, Time/Day, and Actions.

If ACCESS is not specified, CA Top Secret defaults to READ access.

When used with ADDTO, this keyword has the following format:

TSS ADDTO(SDT) MASKREC(mask‑name)
               MASKDATA(field‑definition)

mask‑name

Specifies a user‑defined record ID that must be unique for each MASK record that can contain letters, numbers, and special characters.

Range: 1 to 8

When used with PERMIT, this keyword has the following format:

TSS PERMIT(acid) FCT(oper)
                 ACCESS(access‑level)
                 MASKREC(mask‑name)
                 SELECT(selin,selout)

selin

Specifies the input select record.

selout

Specifies the output select record.

Note: It is not necessary to have both an input and output record for a SELECT statement.

Capacity of list

One MASKREC and SELECT statement per TSS command

This keyword is used with:

• The commands ADDTO, DELETE, LIST, PERMIT, REMOVE, REPLACE, and REVOKE
• The SDT Record exclusively
• MISC3(SDT) authority

Example: MASKREC keyword

This example creates a MASK record called CRYPT1 in the SDT:

TSS ADDTO(SDT) MASKREC(CRYPT1)
               MASKDATA(ADD,CHAR,50,20,***************)

This example permits a user ALL access to the FCT file called PAY with the MASK record CRYPT1 and selects all departments 100 and above from the input record, and all the employees named Mike from the output record:

TSS PERMIT(USR01) FCT(PAY) 
                  ACCESS(ALL)
                  MASKREC(CRYPT1)
                  SELECT('IF DEPT GE "100" AND NAME EQ "MIKE" ')

This example revoke access:

TSS REVOKE(USR01) FCT(PAY)