Keywords › ACCESS Keyword—Control Access to Resources

ACCESS Keyword—Control Access to Resources

Valid on z/OS, z/VM, and z/VSE.

Use the ACCESS keyword to control the types and level of access to many resource classes such as:

• Data sets
• Volumes
• CICS, CA IDMS, and IMS resources
• User-defined resources (UR1 and UR2)

Ownership automatically confers total access to the resource to the owner unless Record Level Protection (RLP) is implemented.

This keyword has the following format:

TSS PERMIT(acid) PPT(pptname) ACCESS(access level) 

This keyword can be used with:

• The commands ADMIN, PERMIT, and REVOKE
• The ACID types User, DCA, VCA, ZCA, LSCA, SCA, and MSCA

You can also use this keyword when adding a resource to the AUDIT record using the ADD command.

Access Levels

When granting XAUTH authority to the named “ACID,” the administrator may limit the access levels which the named “ACID” can PERMIT.

DEFAULT

If the ADMIN command does not specify an ACCESS clause, the named "ACID" of the command is not allowed to specify an ACCESS keyword in PERMIT commands. As a result, all PERMIT commands issued by the named "ACID" will default to the DEFACC access‑level defined in the RDT

ALL

Named "ACID" may permit any resource at any access level.

CONTROL

Named "ACID" may permit any resource at the access level CONTROL.

CREATE

Named "ACID" may permit any resource at the access level CREATE.

DELETE

Named "ACID" may permit any resource at the access level DELETE.

FEOV

Named "ACID" may permit any resource at the access level FEOV.

FETCH

Named "ACID" may permit any resource at the access level FETCH.

NONE

Named "ACID" may permit any resource at the access level NONE.

PURGE

Named "ACID" may permit any resource at the access level PURGE.

READ

Named "ACID" may permit any resource at the access level READ.

REPLACE

Named "ACID" may permit any resource at the access level REPLACE.

SCRATCH

Named "ACID" may permit any resource at the access level SCRATCH.

UPDATE

Named "ACID" may permit any resource at the access level UPDATE.

WRITE

Named "ACID" may permit any resource at the access level WRITE.

Note: The ACLST of the resource class definition in the RDT governs the appropriate use of ACCESS levels in PERMIT commands for individual resources.

More information:

ACLST Keyword—Resource Access Level

Examples: ACCESS keyword

This example authorizes USER01 to update all data sets with AP as their highest-level qualifier:

TSS PERMIT(USER01) DSNAME(AP.) ACCESS(UPDATE) 

In this example, USER02 must load the PAYUPDAT program from the PAYROLL.PRODLIB library, through BATCH to access the PAYROLL.MASTER data set:

TSS PERMIT(USER02) DSNAME(PAYROLL.MASTER) PRIVPGM(PAYUPDAT) LIBRARY('PAYROLL.PRODLIB') FACILITY(BATCH) ACCESS(UPDATE)