Implementing Security for DFSMS › DFSMS Storage and Management Class Access Control

DFSMS Storage and Management Class Access Control

The STORCLAS and MGMTCLAS resource classes allow you to protect and allow user access to specific storage classes and management classes, respectively.

These storage and management classes are each identified by a unique one‑ to eight‑byte name. It is this name that is used in describing a class to CA Top Secret and thereby protecting it.

The following example shows the TSS commands needed to protect a fictitious storage class of PRODSTOR and a fictitious management class of PRODMGMT.

Note: An access level of READ is implied for each permission although it has no distinguishing effect on access to the resource class.

To protect the storage class PRODSTOR, enter:

TSS ADDTO(deptacid) STORCLAS(PRODSTOR)

To allow an ACID to use the PRODSTOR storage class, enter:

TSS PERMIT(acid) STORCLAS(PRODSTOR)

To protect the management class PRODMGMT, enter:

TSS ADDTO(deptacid) MGMTCLAS(PRODMGMT)

To allow an ACID to use the PRODMGMT management class, enter:

TSS PERMIT(acid) MGMTCLAS(PRODMGMT)