Resources › DB2COLL Resource Class—Secure DB2 Collection ID

DB2COLL Resource Class—Secure DB2 Collection ID

Valid on z/OS.

Use DB2COLL to restrict who can add packages to a particular DB2 collection ID.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) DB2COLL(collection‑id)

Prefix length for collection‑id

Two to 18 characters

Capacity of list

One to five DB2 collections per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) DB2COLL(collection‑id)

Prefix length for collection‑id

Two to 18 characters

Capacity of list

One to five collections per TSS command

This resource class has the following format for TSS ADMIN/DEADMIN:

TSS ADMIN(acid) DB2COLL(Authority level(s))

DB2COLL is used with:

• The commands CREATE, DELETE, ADDTO, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, WHOHAS, and REMOVE
• The DB2COLL ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA.
• DB2COLL(OWN) Authority

Administrators can:

• Specify the authority levels: OWN, XAUTH, AUDIT, INFOR, REPORT, and ALL.
• Specify the accesses: CREATEIN, PACKADM, ALL, and NONE. The default is NONE.
• Use the Expiration, Facility, Time/Day, and Actions to control access to collections

Examples: DB2COLL resource class

This example gives the Operations Department (OPRDEPT) ownership of collection FACCT:

TSS ADDTO(OPRDEPT) DB2COLL(FACCT)

This example removes ownership of the collection:

TSS REMOVE(OPRDEPT) DB2COLL(FACCT)

This example authorizes USRMARK the privilege to include new packages within the FACCT collection:

TSS PERMIT(USRMARK) DB2COLL(FACCT) ACCESS(CREATIN,PACKADM)

This example revokes USRMARK's Authority:

TSS REVOKE(USRMARK) DB2COLL(FACCT) ACCESS(CREATIN,PACKADM)

This example gives FINVCA the ability to assign ownership of collections, to permit users to access collections with his scope, and to audit the use of collections owned by his division:

TSS ADMIN(FINVCA) DB2COLL(OWN,XAUTH,INFO)

This example removes FINVCA's Authority for collections:

TSS DEADMIN(FINVCA) DB2COLL(OWN,XAUTH,INFO)

This example determines who has access to the FACCT collection:

TSS WHOHAS DB2COLL(FACCT)

CA Top Secret responds by displaying all of the ACIDs that have access to this particular collection.

This example determines who owns the collection:

TSS WHOOWNS DB2COLL(COLLECTION‑ID)