Implementing Security for TSO › UADS Replacement › Default TSO Data

Default TSO Data

In its role of acting as a UADS replacement, CA Top Secret keeps TSO‑specific data pertaining to user logon defaults on the Security File. These items were formerly kept on the user's UADS member. These items can be updated through the TSS command (the administrator must have MISC2(TSO) authority), and most can also be changed by the user himself when logging on. When the user logs on, TSO displays the logon panel with the current settings of each of these items; at that time, the user is free to change any item. Changes are recorded on the Security File and appear on the logon screen the next time that user logs on.

TSO issues a RACXTRT during logon to extract default TSO logon data from the Security File. If none of the requested fields exist for the user, TSO will attempt to locate the user's record in SYS1.UADS.

If any of the TSO data fields are defined for the user, TSO will not interrogate SYS1.UADS. If any required logon fields are not defined in the user's Security Record, TSO will prompt for the missing information from the TSO logon screen.

Note: No TSS administration can be performed on the TRBA and the TRBA fields, which are displayed when listing a user's TSO data. These fields display the following information:

TRBA

Relative block address (RBA) of the user's mail directory entry in the broadcast data set

TUPT

Value of the user profile table (UPT)

Note: TSO logon remains under the control of CA Top Secret and UADS information will be ignored until every attribute and TSO permit defined to CA Top Secret for the ACID is removed or revoked. To restore an ACID to UADS control you must remove all of the 16 attributes that could possibly exist for the ACID using the TSS REMOVE command. The attributes are:

TSOLPROC() TSOLACCT() TSODEFPRFG() TSOCOMMAND()
TSOUNIT() TSOHCLASS() TSOJCLASS() TSOMCLASS() TSOSCLASS()
TSOUPT() TSOLSIZE() TSOMSIZE() TSOUDATA() TSOOPT() TSORBA() TSODEST()