Controlling Access › Resource Access Permission

Resource Access Permission

The permit access to a resource, enter the command:

TSS PERMIT(acid) RESOURCE(name)

acid

Specifies the ACID being granted access.

RESOURCE

Specifies the resource class.

name

Specifies the name of the individual resource.

Example: grant access to a resource

In this example, the ACID is USER01, the resource class is TERMINAL, and the individual resource name is PD000001:

TSS PERMIT(USER01) TERMINAL(PD000001)

Example: authorize access to users

This example allows USER01 read‑only access to data set MAG.NET.FIELD through the TSO facility. Access is allowed only from 8 a.m. through 6 p.m. for a period of thirty days starting from the date this command is issued:

TSS PERMIT(USER01) DSNAME(‘MAG.NET.FIELD’)
                   FACILITY(TSO)
                   ACCESS(READ)
                   TIME(08,18)
                   FOR(30)

USER01 requires the ability to access TSO through a previous CREATE/ADDTO FACILITY(TSO) command for this example to be valid. If no facility restriction had been specified in the command above, USER01 would have been able to access MAG.NET.FIELD through any facility he can normally access.

Generic Prefixing with PERMIT

Adding the appropriate keywords to the PERMIT command function restricts what resources the ACID can access and how they can be accessed.

Example: generic prefixing

This example permits USER02 to access all programs beginning with the IEH prefix:

TSS PERMIT(USER02) PROGRAM(IEH)

Default Protection

Any resource in the RDT that is not normally protected by default in any mode can be given default protection with the DEFPROT attribute.

Example: provide default protection

This example provides default protection for data sets in IMPLEMENT mode:

TSS REPLACE(RDT) RESCLASS(DATASET)
                 ATTR(DEFPROT)