Previous Topic: Duplicate PermissionsNext Topic: Equal Prefix Lengths

Command Functions › PERMIT Function—Permit Access to Resources › Duplicate Permissions › Best Match

Best Match

CA Top Secret searches a user's entire Security Record before making an access determination. This determination, in part, is based on the permission that contains a resource name or prefix that is the “best match” for the resource name or prefix being requested. This best match is based on the length of the prefix. If USER01 requests access to data set 'AB.CD' and CA Top Secret encounters the following entries during its security validation search:

TSS PERMIT(USER01) DSNAME(AB.C)
                   ACCESS(UPDATE)

TSS PERMIT(USER01) DSNAME(AB)

Then CA Top Secret will grant access to the PERMIT containing AB.C since this data set prefix is the best match for the requested 'AB.CD'.