Security Administration Considerations

Implementing Security for Non-CA Products › FOCUS › Security Administration Considerations

Security Administration Considerations

Since this interface provides support for an inferred FOCUS password‑ID and does not replace existing internal FOCUS security (but rather automates the user's signon process to FOCUS), the CA Top Secret security administrator must:

Place the user's FOCUS password‑ID in the INSTDATA field, and
Allow the user to access various data sets only with the FOCUS program (perhaps on a restricted basis).

The ADD command function is used to place the FOCUS password‑ID into the user's Security Record. The INSTDATA keyword for the FOCUS password‑ID is FOCUS. The following examples illustrate the use of the TSS command for TSS/FOCUS password‑ID administration:

In the following example, the user, SYS001, has a FOCUS password‑ID of SYSX and is allowed to redefine his FOCUS password (for the duration of the FOCUS session) after invoking FOCUS.

TSS ADDTO(SYS001) INSTDATA(FOCUS(SYSX))

In this example, the user, PAY100, has a FOCUS password‑ID of PAYX and is not allowed to alter his inferred FOCUS password‑ID after invoking FOCUS.

TSS ADDTO(PAY100) INSTDATA(FOCUS("PAYX."))

The PERMIT function of the TSS command is used to handle the second portion of CA Top Secret /FOCUS security. In the following examples, assume that the FOCUS program at your site has been installed under the name FOCUS.

The first example shows FOCUS accessing payroll production data sets beginning with the high‑level qualifier PAYROLL. In addition, ten junior‑level employees in the PAYROLL Department, using profile PAY001JR, are only allowed access to these data sets using FOCUS.

TSS PERMIT(PAY001JR) DSNAME(PAYROLL.)
                     PRIVPGM(FOCUS)
                     ACCESS(UPDATE)

In the second example, a specific user is accessing accounting data sets beginning with the high‑level qualifier ACCTG. on a read‑only basis, using FOCUS in addition to several other general‑purpose programs.

TSS PERMIT(USR001) DSNAME(ACCTG.)
                   ACCESS(READ)