Extending Security Using the Application Interface › Application Interface Checks › Resource List Checking

Resource List Checking

The RESLIST function of TSSAI generates a list of resources that are added or permitted to the requesting user within a specified resource class. The RESLIST function for a resource can be protected because RESLIST is defined by CA Top Secret to the RDT.

To establish protection for the RESLIST function on the named resource, enter:

TSS ADDTO(owner)  RESLIST(resource)

Alternatively, all RESLIST resource access can be protected by adding the DEFPROT attribute to the RESLIST resource.

To permit or deny RESLIST, enter:

TSS PERMIT(user)  RESLIST(resource)
TSS PERMIT(user)  RESLIST(resource) ACTION(DENY,FAIL)

To invoke the RESLIST function through the application interface, the field TSSCLASS of the parameter TSSCPL must be set to the value RESLIST, and the name of the resource must be placed in the field TSSRNAME.

Normally, the request is performed for the ACID assigned to the calling program. However, the user may provide an ACEE pointer for a specified user by moving the pointer value to TSSCACEE prior to the TSSAI call.

The length for TSSRTN returned by RESLIST is 1024, although you can specify an area as large as 32K. To supply a larger value, indicate a new format for the Application Interface parameter by using the TSSHEAD value TCPLV5L1.

To accommodate the RESLIST data, you can:

• Specify the traditional 256 or 1024 byte area for the RESLIST data, or
• Supply the length of TSSRTN in the field TSSLRTN.

If the user‑supplied pre-allocated area is not large enough to hold the RESLIST returned data, the interface returns as much data as will fit and post a return code of 24.

The length of TSSCPL is stored in TSSPLEN2, similar to the length used by the FACLIST function. TSSRTN is formatted in the TSSCPLA Assembler copybook in the AAKOSRC0 installation file. RESLIST formats the TSSRTN structure into the following:

TSSRFLDS

Four‑byte count of the number of entries returned

TSSRDATA

List structure. The entries of the TSSRDATA list structure are mapped as follows:

• TSSRLLEN—Two‑byte resource name length
• TSSRLGEN—One‑byte indicator showing: GENERIC resource name
• TSSRLRES—Up to 255-character resource name whose actual length is contained in TSSRLLEN

The TSSRLENT Assembler DSECT has been provided in the TSSCPLA copybook for programming convenience in mapping these entries.

TSSRTN has been formatted for the COBOL programmer in TSSCPLC, and for the PL/I programmer in TSSCPLP. See the comments in the copybooks for programming suggestions in higher-level languages.

TSSRC can return all of the values previously documented in this chapter. However, the RESLIST call can also return the special value 24 (TSSCRC='XS') which means the return area is too small to hold list.