Previous Topic: Type 1 AOI Command Security ConversionNext Topic: How TSSISMU1 Processing Works

Converting SMU Control Statements to CA Top Secret › Type 1 AOI Command Security Conversion › The TSSISMU1 Utility

The TSSISMU1 Utility

This TSSISMU1 utility is a direct conversion of the SMU security process.

The TSSISMU1 utility processes the SMU statements. For each transaction in the SMU AOI security statements, the utility generates a TSS CREATE command to create an ACID for the transaction. For each command/transaction combination in the SMU statements, the utility generates a TSS PERMIT statement to permit the transaction ACID access to the command. If the command specified in a TCOMMAND statement is * TSS PERMIT statements are generated for each IMS command eligible for AOI.

AOI=TRAN must be specified in the IMS system definition (IMS stage 1) in the TRANSACT macro for any transaction that issues AOI type 1 commands. The utility optionally issues a report listing the transactions that require AOI=TRAN in the IMS system definition.

The utility can also optionally take as input a data set with the IMS system definition (IMS stage 1) statements containing the transaction definitions, and generate an updated set of statements that includes the AOI=TRAN parameter for the transactions that require it. The AOI=TRAN parameter is unconditionally added to the TRANSACT macro definition for any transactions that issue AOI type 1 commands, even if the TRANSACT macro already contains an AOI parameter specification. If two AOI parameters are specified on a TRANSACT macro, an error is generated during the IMS stage 1 process, allowing you to determine the correct specification.

Examples: TSSISMU1 Conversion

In this example the SMU input is one of the following:

)( TCOMMAND DISPLAY
CTRANS TRANAOI

)( CTRANS TRANAOI
TCOMMAND DISPLAY

The utility generates:

TSS CREATE(TRANAOI) TYPE(USER) NAME('AOI transaction')
                    PASSWORD(TRANAOI)
                    SOURCE(TRANAOI)
                    NOSUSPEND    
                    DEPT(department)
                    FAC(imsfac)
TSS PERMIT(TRANAOI) CIMS(DIS)
                    FAC(imsfac)

In this example the SMU input is one of the following:

)( TCOMMAND *
CTRANS TRANAOI

)( CTRANS TRANAOI
 TCOMMAND *

The utility generates PERMIT statements for every IMS command eligible for AOI:

TSS CREATE(TRANAOI) TYPE(USER)
                    NAME('AOI transaction')
                    PASSWORD(TRANAOI)
                    SOURCE(TRANAOI)
                    NOSUSPEND     
                    DEPT(department)
                    FAC(imsfac)
TSS PERMIT(TRANAOI) CIMS(ACT)
                    FAC(imsfac)
TSS PERMIT(TRANAOI) CIMS(ALL)
                    FAC(imsfac)
TSS PERMIT(TRANAOI) CIMS(ASS)
                    FAC(imsfac)

TSSISMU1 JCL Sample

The following sample JCL executes the TSSISMU1 conversion utility:

//    JOB …
//TSSISMU1     EXEC PGM=TSSISMU1,PARM='department,imsfac'
//SMU          DD   DSN=smu.input,DISP=SHR              
//TSSCMDS      DD   DSN=tsscmds.output,DISP=SHR         
//REPORT	       DD   SYSOUT=*                   
//STG1IN	       DD   DSN=ims.stage1.input,DISP=SHR      
//STG1OUT      DD   DSN=updated.ims.stage1,DISP=SHR     
//
Department

Specifies the input parameter used in the TSS CREATE commands to create ACIDs for the transaction names. The transaction ACIDs are defined in the specified department.

Imsfac

Specifies the input parameter for the facility name of the IMS control region whose SMU input is converted. This value is used in the TSS CREATE commands for the transaction ACIDs to give the ACIDs access to the IMS region and in the TSS PERMIT commands to give the transaction access to the command in the IMS region.

SMU

This DD statement specifies the input data set containing the SMU statements for the IMS region being processed.

This must be a sequential data set with a record length of 80.

TSSCMDS

This DD statement specifies the output data set created by the TSSISMU1 utility containing the TSS statements generated by the conversion utility.

This must be a sequential data set with a record length of 80.

REPORT

(Optional) This DD statement specifies the output data set created by the TSSISMU1 utility containing a report listing the transactions in the IMS system definition (IMS stage 1) that require the AOI=TRAN parameter.

If the DD statement specifies a data set rather than SYSOUT, the data set must be sequential with a record length of 80.

If not specified the report is not generated.

STG1IN

(Optional) This DD statement specifies the input data set containing the IMS system definition (IMS stage 1) statements that include the TRANSACT macro statements for all transactions.

The data set must be sequential with a record length of 80.

If not specified the IMS system definition update processing is not performed. If this DD statement is specified, the STG1OUT DD statement is required.

The utility does not expand COPY statements or require the entire IMS system definition. The STG1IN input data set must contain the IMS system definition TRANSACT macro statements for all transactions.

STG1OUT

This DD statement specifies the output data set created by the TSSISMU1 utility, containing the updated IMS system definition (IMS stage 1) statements. The AOI=TRAN parameter is added to the TRANSACT macro definition for any transactions that issue AOI type 1 commands. The data set must be a sequential data set, with a record length of 80.

This DD statement is optional. It is only required if the STG1IN DD statement is specified.

Notes: