Previous Topic: Expanding Security

Next Topic: Interpreting the Facility Matrix Table

Protecting Facilities

A facility in CA Top Secret is defined as an MVS subsystem that processes work on behalf of users and jobs. Two prime examples of MVS facilities are TSO and CICS, but CA Top Secret also treats VM as a facility.

In addition to predefined resource classes (kept in the Resource Descriptor Table), CA Top Secret comes equipped with a set of predefined facilities. A list of these facilities, along with their particular attributes (for example, ID, security mode) is kept in the Facilities Matrix Table (similar to how resource class information is kept in the RDT). A number of these predefined entries (the exact number depends on whether you are using MVS or VM) are called dummy facilities and are to be used for site-defined facilities, such as additional test regions for CICS or IMS. Each of these dummy facilities is given the USERnn name (nn is a numeric character).

The Facilities Matrix Table is administered through the FACILITY control option and suboptions. By using the TSS MODIFY command, the Security Administrator can: