Previous Topic: Globally Accessible ResourcesNext Topic: Bypass Resource Checking

Securing Resources › Resource Access Control › DEFPROT Attribute

DEFPROT Attribute

In FAIL mode, volumes, data sets and minidisks are automatically protected by default. In WARN and IMPLEMENT modes, you add default protection by modifying the RDT (using TSS REPLACE instead of TSS PERMIT) to include DEFPROT for that resource class. For example, if you were in WARN mode but you wanted to protect all data sets by default, you would enter:

TSS REP(RDT) RESCLASS(DSN) ATTR(DEFPROT)

In WARN mode, access violations would be generated for those volumes, data sets, and minidisks that have not yet been defined toCA Top Secret.

Default protection is not limited to data sets and minidisks. Assigning the DEFPROT attribute to any resource in the RDT can give default protection to predefined—as well as dynamically defined—resources that are normally not protected by default in any mode, including FAIL.