Ownable Resource Security › Authorizing Resource Access › Denying Resource Access with ACTION(DENY)

Denying Resource Access with ACTION(DENY)

A TSS PERMIT(acid) ACTION(DENY) entry may be used to selectively deny an ACID access to any resource which does not support an access level. For example, let us assume that USER01 is connected to PROF01 which provides USER01 with several resource authorizations including access to all the terminals in the Accounting Department.

Suppose USER01 is denied access to two terminals: GRAF04DC and GRAF05DC. To disallow authorization for USER01 to access these terminals, the administrator enters this command:

TSS PER(USER01) TERM(GRAF04DC,GRAF05DC)  ACTION(DENY)

Whether a request by USER01 to use either of these terminals is actually failed still depends upon the MODE that applies. To ensure that this request automatically fails, the administrator enters:

TSS PER(USER01) TERM(GRAF04DC,GRAF05DC)  ACTION(DENY,FAIL)