Ownable Resource Security › Authorizing Resource Access › Special PERMIT Options Using ACTION Parameter

Special PERMIT Options Using ACTION Parameter

Through TSS PERMIT ACTION entries, special processing options can be selected. The chart below lists all the different ACTION options and their basic functions:

ACTION(ADMIN)

Gives authority to another administrator requesting the ability to PERMIT and REVOKE resources outside of his scope.

ACTION(FAIL)

If the permit is used to allow or disallow access, the authorization is processed as if the user is running in FAIL mode.

ACTION(DENY)

Causes a security violation to be generated when the user requests access to the specified resource. The mode that applies to the user is still honored, unless ACTION(FAIL) is used in conjunction with this option.

ACTION(AUDIT)

Audits all accesses to this resource regardless of the mode or logging options of the user.

ACTION(PASSWORD)

Requires the directory link password to the minidisk after CA Top Secret verification has authorized access to the minidisk.

ACTION(NOTIFY)

A message is issued to the operator on any access to the specified resource granted by this permission.

ACTION(NODSN)

All data set-level restrictions are bypassed by CA Top Secret and the minimum and maximum access levels to all data sets are controlled by the PERMITted VOLUME access.

ACTION(EXIT)

Passes control to the Installation exit for all accesses to the specified resource granted by this permission.

ACTION(VMPRIV)

Controls what access rights are authorized for ambiguous commands such as the CP command QUERY DASD.