Securing Resources › Resource Access Control › Using the TSS PERMIT Command › Restricting Access by “Path”

Restricting Access by “Path”

By using the PRIVPGM keyword with the LIBrary and FACility keywords, you can design an ACID’s access authorization so that that ACID would only be able to access a resource through a specific program that would have to be loaded from a specific library that, in turn, could only be accessed through a specific facility. For example:

TSS PER(USER02) DSN(PAYROLL.MASTER) PRIVPGM(PAYUPDAT)
    LIB(‘PAYROLL.PRODLIB’) FAC(BATCH) ACCE(UPDATE)

requires USER02 to load the PAYUPDAT program from the PAYROLL.PRODLIB library, through BATCH to access the PAYROLL.MASTER data set.