Previous Topic: Administrative Authority for Modifying the FDTNext Topic: Changing User-Defined Fields in the FDT

Ownable Resource Security › Field Descriptor Table (FDT) Record › Maintaining the FDT › Defining New Fields to the FDT

Defining New Fields to the FDT

You can define a new field to the FDT by using the command:

TSS ADD(FDT) FDTNAME(field-name)
             FDTCODE(hex-code)
             SEGMENT(segment-name)
             MAXLEN(nn)
             DISPLAY(display-name)
             [ATTR(MIXED)][(NONDISP)]
FDTNAME

Adds an up to eight-character user-defined field to the FDT Record when FDT is the target ACID name, and allows one field-name per command that can be a letter, number, or special character.

FDTCODE

Adds a user-defined hex-code to the FDT Record when FDT is the target name, and allows one hex-code per command that can range from 01 to FF.

SEGMENT

Assigns an up to eight-character field to a specific segment, and allows one segment-name per command that can be a letter, number, or special character. You cannot add user-defined fields to predefined segments. The following are predefined CA Top Secret segments:

MAXLEN

Defines the number of bytes that can be entered for the user-defined FDT entries, and allows one MAXLEN value per command. The total of all user-defined fields should not exceed 32,767 bytes.

DISPLAY

Defines an up to 11-character display-name with its associated defined field and segment in the FDT Record, and allows one display-name per command that can be a letter, number, or special character. The display-name must be enclosed in single quotes if it contains blanks.

ATTR

Displays fields from the FDT in mixed case format when ysing the MIXED attribute. If you do not specify ATTR, it defaults to uppercase.

If a field is defined with the NONDISP attribute, the field cannot be seen by an administrator using a TSS LIST function on the ACID. The data can be extracted and/or modified as normal using the Application Interface or the RACROUTE macro.

You may want to use non-CA Top Secret fields to define installation information (by user ACID) that can be maintained or extracted by application programs. Applications can extract and update this user information using the RACROUTE macro.

Extract of the FDT is performed from the USER record of an ACID or from the first profile connected to an ACID. This allows the administrator to assign security related fields to a role based profile that can be added to any user. Use the FIRST keyword when adding the new profile to an ACID to ensure it is the first profile/group found in the list. The profile is searched for a field if it is not found in the USER record for the ACID.

Examples

This example creates an area code and home phone field called HPHONE that will belong to a segment named HPHNATTR and a display called HPHNUM. The maximum length for the field is 12 bytes and has a hex-code of 01. This field is created by entering the command shown below.

TSS ADD(FDT) FDTNAME(HPHONE) FDTCODE(01)
    SEGMENT(HPHNATTR) MAXLEN(12) DISPLAY(HPHNUM)

To add the contents of this area code and home phone field to its respective owner, enter:

TSS ADD(USER01) HPHONE('908 780 5550')

Note: Use single quotes when the field contains blanks.