This section contains the following topics:
Data Set and Volume Level Security
Installation Defined Resource Protection
Specific Device Output Restrictions
Message Queue Manager Protection
IBM DCE, SystemView, Netview, and OPTIME Protection
The objects that CA Top Secret protects are called resources. Each resource in CA Top Secret is an instance of a Resource Class (RESCLASS) defined in the RDT. Some resource classes can be used in multiple facilities. Other resource classes are specifically defined for individual environments. Resources are used throughout the system to protect the objects and services provided by jobs, tasks, and sessions in multi-user environments.
Most resource classes are defined as GENERIC, which allows all resources with the same prefix to be protected by the same command. A NONGENERIC definition requires complete specification of each resource by individual commands.
Resource classes defined as DEFPROT automatically protect all resources in the class, regardless of whether an explicit command has been issued to establish ownership.
You can restrict permission under the control of the RDT definition:
Indicates unusual actions or modes associated with the permission.
Restricts the access levels which are permitted.
Restricts the program from which the permission is initially executed to a specific data set.
Restricts the program from which the permission is initially executed to a specific program.
You can also restrict permission restricted by:
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|