Implementing Security for CA IDMS › Installation of CA IDMS › Define the CA IDMS Signon Resource Class

Define the CA IDMS Signon Resource Class

CA IDMS drives an additional resource check at signon. The resource class and resource name are determined by the values coded in the #SRTT entries shown in the section Defining the CA IDMS #SRTT. The resource check is a simple check of permissions-no access levels are specified.

Using the previous #SRTT example, a system resource class would need to be added to the RDT. The following sample TSS command demonstrates how this would be done:

TSS ADD(RDT) RESCLASS(idmssys)
             RESCODE(xx)
             ATTR(LIB,PRIVPGM,DEFPROT)
             MAXLEN(36)
             ACLST(NONE,ALL)
             DEFACC(ALL)

The RESCODE value xx should be a previously unassigned value for a user-defined resource class.

The external name specified for the IDMS #SRTT SGON resource class is coded as EXTNAME=idmssys. The IDMS SGON resource is associated with the CA Top Secret RESCLASS idmssys. CA IDMS will use the IDMS sysgen SYSTEM name as the resource name. The complete CA Top Secret resource name for signing on to system IDMS120 with #SRTT is idmssys (SGON.IDMS120). CA IDMS will fail all signons if the resource class is not owned and permitted to the users.

The following commands show how to add IDMS120 to the idmssys resource class in the department idmsdept and then PERMIT the user identified by usracid to access the signon resource.

TSS ADD(idmsdept) idmssys(SGON.)

TSS PERMIT(usracid) idmssys(SGON.IDMS120)

Replace system IDMS12 with the name of the IDMS system parameter being used to initialize your IDMS region.