Resources › PROGRAM Resource Class—Secure Programs and Utilities

PROGRAM Resource Class—Secure Programs and Utilities

Valid on z/OS and z/VSE.

Use PROGRAM to secure system programs and utilities.

When used with TSS ADDTO/REMOVE, this resource class has the following format:

TSS ADDTO(acid) PROGRAM(program)

Prefix length

One to eight characters

Capacity of list

One to five prefixes per TSS command

When used with TSS PERMIT/REVOKE, this resource class has the following format:

TSS PERMIT(acid) PROGRAM(program)

Prefix length

One to eight characters

Capacity of list

One to five prefixes or names per TSS command

This keyword is used with:

• The commands CREATE, ADDTO, REMOVE, PERMIT, REVOKE, ADMIN, DEADMIN, WHOOWNS, and WHOHAS
• The PROGRAM ACID types User, Profile, Department, Division, Zone, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS ADD/REMOVE
• The PROGRAM ACID types User, Profile, DCA, VCA, ZCA, LSCA, SCA, and MSCA when used with TSS PERMIT/REVOKE
• PROGRAM(OWN) authority to ADD or REMOVE PROGRAMs from ACIDs
• PROGRAM(XAUTH) authority to permit or revoke access to transactions

The administrator can use any of the following methods to control access to PROGRAMS: Expiration, Facility, Time/Day, and Actions. Sysid, Timerec, and Calendar restrictions are not supported.

Protection

Programs that are protected include: TSO commands, and those specified by 'EXEC PGM=program' in JCL statements; all programs executed internally via CALL, LINK, LOAD, XCTL, ATTACH, EXECUTE and CA‑IDMS programs.

Examples: PROGRAM Resource Class

This example protects the use of all system utilities, IEH5000 and IEASSST, by assigning ownership to the Corporate Department ACID, and subsequently PERMIT restricted access to users or profiles:

TSS ADDTO(CORPRAT) PROGRAM(IEH,IEASSST)

This example removes ownership:

TSS REMOVE(CORPRAT) PROGRAM(IEH,IEASSST)

This example permits use of the SUPERZAP program from Batch only:

TSS PERMIT(SYSAU2) PROGRAM(IMASPZAP)
                   FACILITY(BATCH)

This example revokes access:

TSS REVOKE(SYSAU2) PROGRAM(IMASPZAP) REMOVE