Implementing Ownable Resource Security › SFS Command and Directory Protection › Securing SFS Directories › Examples - DIRECTRY

Examples - DIRECTRY

All public EXECs for the TOPS company reside in the 'POOL1:SYSTEM. EXECS.PUBLIC' filepool directory. Also within this directory are a number of EXECs used by the Production Control Staff for job scheduling, by the Applications Programmers for compiling and by the Administrative Assistants for various other job functions.

If each of these EXECs is grouped by a standardized prefix (i.e., PC for Production Control, AP for Applications Programming, AA for Administrative Assistance), the following commands would be issued to prevent these groups from accessing each other’s EXECs:

For Production Control:

TSS PER(PCNTLP01) DIRECTRY('SYSTEM.EXECS.PUBLIC.') ACC(READ) POOL(POOL1)
TSS PER(PCNTLP01) DIRECTRY('SYSTEM.EXECS.PUBLIC.') ACC(READ) FILE(PC*.*)
    POOL(POOL1)

For Application Programming:

TSS PER(APPLPP01) DIRECTRY('SYSTEM.EXECS.PUBLIC.') ACC(READ) POOL(POOL1)
TSS PER(APPLPP01) DIRECTRY('SYSTEM.EXECS.PUBLIC.') ACC(READ) FILE(AP*.*)
    POOL(POOL1)

For Administrative assistants:

TSS PER(ADMINP01) DIRECTRY('SYSTEM.EXECS.PUBLIC.') ACC(READ) POOL(POOL1)
TSS PER(ADMINP01) DIRECTRY('SYSTEM.EXECS.PUBLIC.') ACC(READ) FILE(AA*.*)
    POOL(POOL1)