The ownership of a resource may be transferred from one ACID to another by using TSS ADDTO(acid). Assuming the administrator entering the transfer has the appropriate administrative authority, CA Top Secret automatically transfers ownership of the specified resources from the former to the new owner. The essential administrative authority required is RESOURCE(OWN). Also, both the new and former owners must fall within the scope of the administrator.
The TSS command entered is the same as if the resource were currently unowned with the addition of the UNDERCUT keyword as a “flag” that resource ownership is being transferred. Only the new owner is identified; no identification of the current owner is required.
To illustrate this procedure, assume that the virtual reader CMSBATCH is owned by USER01, and you want to transfer ownership to USER02. A single CA Top Secret entry accomplishes this transfer:
TSS ADDTO(USER02) VMRDR(CMSBATCH) UNDERCUT
In effect, the UNDERCUT keyword tells CA Top Secret that whoever is making this entry is aware that CMSBATCH is already owned. Note that the UNDERCUT keyword is required whenever ownership is being transferred and not just in undercutting type situations.
Whenever ownership is transferred, CA Top Secret automatically confers full access authorization to the former owner (provided that the former owner was a user or profile). Continuing with our example, the result is the same as if this entry had simultaneously been made:
TSS PERMIT(USER01) VMRDR(CMSBATCH)
Likewise, validly entering the following commands in the indicated order:
makes USER02 the owner of all minidisks prefixed by USER (USER01, USERA, USERXYZ). (Thus, ownership of USER01 minidisks has been “undercut”--see earlier discussion.) Furthermore, the result is as if the following had also been entered.
TSS PERMIT(USER01) VMMD(USER01) ACCESS(ALL)
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|