ACID Security › Defining Profile ACIDs › Ordering of Profiles Attached to an ACID

Ordering of Profiles Attached to an ACID

Because the order of profiles directly affects the permissions granted, administrators should make sure that all profiles are ordered as they want them to be. By default, any new profiles added to a list of existing profiles, will be added to the end of the list. With the TSS ADDTO command, however, administrators can designate where in the list, a new profile is to be added. To alter the desired order of the new profile, the following syntax should be used:

TSS ADD(acid) PROFILE(profacid) AFTER|BEFORE(existingprofacid)

For example, suppose an ACID called USER01 currently has four profiles: PROF1, PROF2, PROF3, and PROF4. If an administrator wants to add a new profile, PROF5, before PROF3, he could enter either of the following:

TSS ADD(USER01) PROFILE(PROF5) AFTER(PROF2)
                  or
TSS ADD(USER01) PROFILE(PROF5) BEFORE(PROF3)

Note: Already existing profiles cannot be reordered, only newly added ones can.

You can also add an existing profile and make it the first one in the search order by using the FIRST keyword. For example, to add an existing profile called PROF4 to USER04 and make it the first in the search order, issue the command below.

TSS ADD(USER04)  PROFILE(PROF4) FIRST