Resources › FIELD Resource Class—Secure Database Fields

FIELD Resource Class—Secure Database Fields

Valid on z/OS and z/VSE.

Use FIELD to secure installation‑defined database fields.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) FIELD(oper,oper,oper,...)

Prefix length

One to eight characters

Capacity of list

One to five FIELD prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) FIELD(prefix(es))
                 ACCESS(access levels)

Prefix length

One to eight characters

Capacity of list

One to five prefixes per TSS command

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The FIELD ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The FIELD ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• FIELD(OWN) authority to ADD or REMOVE ownership of FIELDs from ACIDs
• FIELD(XAUTH) authority to permits or revoke access to FIELDs that are owned

The administrator can:

• Specify the access levels: ALL, NONE, READ, UPDATE, and WRITE. If ACCESS is not specified, CA Top Secret defaults to READ access.
• Use any of the following methods to control access to FIELDs: Expiration, Facility, Pathing, Time/Day, Actions.

Protection

Fields are not automatically protected by CA Top Secret, even when defined via the ADDTO command function. An application program must perform the security check by calling CA Top Secret via FRACHECK or the application high‑level language interface.

Examples: FIELD resource class

This example protects a group of fields for a CICS application:

TSS ADDTO(DEPTC) FIELD(A100,A200,A300)

This example removes ownership:

TSS REMOVE(DEPTC) FIELD(A100,A200,A300)

This example permits CICS clerks to update fields daily from 8:00 a.m. until 5:00 p.m., but only through a specific CICS application program (on behalf of a transaction):

TSS PERMIT(PRFCLRK) FIELD(A1006,A3002)
                    TIMES(08,17)
                    DAYS(WEEKDAYS)
                    PRIVPGM(ISPTASK1)
                    ACCESS(U)

This example revokes access:

TSS REVOKE(PRFCLRK) FIELD(A1006,A3002)