Implementing Security for CA Roscoe › Modes of Operation

Modes of Operation

CA Top Secret supports four separate modes of operation: DORMANT, WARN, IMPLEMENT, and FAIL. Modes are assigned at five different levels:

Global

The default for the entire CA Top Secret community. For example:

MODE(WARN)

Facility

Affects a particular facility within the community. For example:

FACILITY(ROSCOE=MODE=IMPL)

Profile

Affects a particular group of users attached to the profile. For example:

TSS PERMIT(PROF01) MODE(IMPL)

User

Affects a particular user within the community. For example:

TSS PERMIT(USER01) MODE(FAIL)

Resource

Forces a particular resource authorization to be processed in FAIL mode. For example:

TSS PERMIT(USER01) TERMINAL(L048T29)
                   ACTION(FAIL)

Note: The global level is implemented through the MODE control option, or on a facility level through the MODE= suboption of the FACILITY control option. The profile, user and resource levels are implemented through the PERMIT function of the TSS command.