An undercut occurs when a generic prefix is used to establish ownership that is generically higher (more inclusive) than an existing prefix. For example, the prefix “VM” undercuts the prefix “VMTEST.”
CA Top Secret does not allow an undercut unless all prefixes are owned within the scope of the administrator specifying the undercut.
Also, CA Top Secret does not allow the use of a generic prefix to establish ownership that is generically lower (less inclusive) than an existing prefix. For example, the prefix “VMTEST” cannot be used to undercut the “VM” prefix
If the UNDERCUT is valid, CA Top Secret automatically transfers ownership of the resources specified by the generically lower prefix to the new owner. See Transferring Ownership of Resources for information about undercutting resources.
Undercutting restrictions do not apply when the subsequent prefix is used to specify resource authorization rather than resource ownership. For example, the following are valid:
TSS ADD(DEPT01) VMRDR(BAT) TSS PERMIT(USER02) VMRDR(BATCH)
Avoid assigning ownership of a prefix that overrides a previously owned prefix and inadvertently “undercutting” the existing prefix.
|
Copyright © 2014 CA Technologies.
All rights reserved.
|
|