GSOMDOBJ Resource Class—Secure z/OS GSOMDOBJ Objects

Resources › GSOMDOBJ Resource Class—Secure z/OS GSOMDOBJ Objects

GSOMDOBJ Resource Class—Secure z/OS GSOMDOBJ Objects

Valid on z/OS.

Use GSOMDOBJ to secure GSOMDOBJ for z/OS objects

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) GSOMDOBJ(object)

Prefix length: One to eight characters
Capacity of list: One to eight prefixes per TSS command.

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) GSOMDOBJ(object)

Prefix length: One to sixteen characters
Capacity of list: One to eight prefixes per command.

This keyword is used with:

The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
The GSOMDOBJ ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
The GSOMDOBJ ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
GSOMDOBJ (OWN) authority to ADD or REMOVE ownership of GSOMDOBJ resources from ACIDs
GSOMDOBJ(XAUTH) authority to permit or revoke access to GSOMDOBJ resources

The administrator can use any of the following methods to control access to GSOMDOBJ resources: Expiration, Facility, Program Pathing, Time/Day, and Actions.

Examples: GSOMDOBJ resource class

This example protects the resource with CA Top Secret by assigning ownership to the Corporate Department(owning acid):

TSS ADDTO(CORPORAT) GSOMDOBJ(OBJECT1)

The administration may now PERMIT access to users or profiles that require access.

This example removes ownership:

TSS REMOVE(CORPORAT) GSOMDOBJ(OBJECT1)

This example permits users in the Technical Services Department to access OBJECT1.XXXXXXXX on Fridays only:

TSS PERMIT(TECHPROF) GSOMDOBJ(OBJECT1.XXXXXXXX)
                     DAYS(FRIDAY)

This example permits users in Technical Services Department to access OBJECT1.XXXXXXXX:

TSS PERMIT(TECHPROF) GSOMDOBJ(OBJECT1.XXXXXXXX)

This example revokes access:

TSS REVOKE(TECHPROF) GSOMDOBJ(OBJECT1.XXXXXXXX)