Resources › DATABASE Resource Class—Secure Databases

DATABASE Resource Class—Secure Databases

Valid on z/OS.

Use DATABASE to secure all databases.

This resource class has the format with TSS ADDTO/REMOVE:

TSS ADDTO(acid) DATABASE(DdddFfff)

The letters ddd represent the database number from 1 to 255 and fff is the file number from 1 to 255.

Prefix length

One to eight characters

Capacity of list

One to five ADABAS prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) DATABASE(DdddFfff)
                 ACCESS(access levels)

Prefix length

One to eight characters

Capacity of list

One to five ADABAS prefixes per TSS command

DATABASE is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS.
• The ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The ACID types User, Profile, LSCA, ZCA, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• DATABASE(OWN) authority to ADD or REMOVE ownership of DATABASE from ACIDs
• DATABASE(XAUTH) authority to PERMIT or REVOKE access to DATABASEs

The administrator can:

• Specify any or all of the following access levels for ADABAS databases and files: ALL, CREATE, NONE, READ, SCRATCH, UPDATE, and WRITE. If ACCESS is not specified, CA Top Secret defaults to READ access.
• Use any of the following methods to control access to databases: Expiration, Facility, Time/Day, and Actions.

Examples: DATABASE resource class

This example protects the file number 105 contained within the ADABAS database number 3, by assigning ownership to DEPT01:

TSS ADDTO(DEPT01) DATABASE(D003F105)

This example remove ownership:

TSS REMOVE(DEPT01) DATABASE(D003F105)

This example permits USER01 to file number 105 contained within ADABAS database number 3:

TSS PERMIT(USER01) DATABASE(D003F105)

This example revokes access:

TSS REVOKE(USER01) DATABASE(D003F105)