Converting SMU Control Statements to CA Top Secret › AGN Security to RAS Conversion

AGN Security to RAS Conversion

An application group name (AGN) identifies a group of transactions, terminals, and PSBs that an IMS dependent region, such as a BMP, is permitted to access. AGNs are defined for an IMS system using the Security Maintenance Utility (SMU).

This example shows how an AGN is defined in the SMU input:

)(  AGN      name
    AGLTERM  terminal name
    AGPSB    PSB name
    AGTRAN   transaction

name

Specifies the name selected for the AGN. This statement identifies the terminals, PSBs, and transactions that follow it as a group that restricts access by dependent regions.

Each AGN name must be unique.

Range: 8 characters or less

terminal name

Specifies the logical terminal (LTERM) name for a terminal included in the AGN.

PSB name

Specifies the name of a PSB included in the AGN.

transaction

Specifies the name of a transaction included in the AGN.

An IMS dependent region requests the use of an AGN by specifying the AGN name in the startup JCL for the dependent region. IMS performs a security validation to verify that the dependent region is permitted to use the AGN. The IMS control region then limits the dependent region's use of IMS resources to those defined in the AGN that was requested.