Resources › AREA Resource Class—Secure CA-IDMS Database Areas

AREA Resource Class—Secure CA-IDMS Database Areas

Valid on z/OS.

Use AREA to secure CA‑IDMS database areas.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) AREA(prefix(es))

Prefix length

One to eight characters

Capacity of list

One to five prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) AREA(prefix(es))
                 ACCESS(access levels)

Prefix length

One to forty‑four characters

Capacity of list

One to five prefixes per TSS command

AREA is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• AREA(OWN) authority to ADD or REMOVE ownership of AREAs from ACIDs
• AREA(XAUTH) authority to PERMIT or REVOKE access to AREAs

The administrator can:

• Specify any or all of the following access levels: NONE, READ, ALL, and UPDATE. If ACCESS is not specified, CA Top Secret defaults to READ access.
• Use any of the following methods to control access to AREA resources: Expiration, Facility, Program Pathing, Time/Day, and Actions.

Examples: AREA resource class

This example gives the Personnel Department ownership of the AREA for the Corporate Personnel Database (PERDB):

TSS ADDTO(PERSDP) AREA(PERDB)

This example removes ownership:

TSS REMOVE(PERSDP) AREA(PERDB)

This example permits USER01 to have ALL access to PAYFILE:

TSS PERMIT(USER01) AREA(PAYFILE)
                   ACCESS(ALL)

This example revokes USER01's access to PAYFILE:

TSS REVOKE(USER01) AREA(PAYFILE)