Securing Resources › Resource Access Control › Using the TSS PERMIT Command › Using the ACTION Keyword

Using the ACTION Keyword

Not all resource classes can be restricted by access level or path. For this reason, CA Top Secret provides another layer of security through the ACTION keyword. The operand specified with the ACTION keyword tells CA Top Secret how to respond to an access request. For example:

TSS PER(USER03) TERM(PD01) ACTION(NOTIFY)

tells CA Top Secret to notify the security console when USER03 accesses the PD01 terminal.

In addition to ACTION(NOTIFY), the ACTION operands include the following:

FAIL

Causes any unauthorized access attempt to be treated in FAIL mode regardless of the security mode the facility or user is in.

DENY

InstructsCA Top Secret to deny the ACID access to the resource.

AUDIT

Creates an audit trail when the resource is accessed.

EXIT

Invokes theCA Top Secret Installation Exit.

VMPRIV

Grants the accessor the privileged form of CP commands and DIAGNOSE instructions.

ADMIN

Allows a Security Administrator to administer resources that are not owned within his scope of authority. More information on resource administration is included in the "Administering Your Security Environment" chapter.

PASSWORD

Adds additional password protection before granting access to a data set or minidisk.

NODSN

Instructs CA Top Secret to only check volume authorizations for access requests to data sets on this particular volume.

Note: ACTION(DENY) does not apply to MVS data sets and volumes. Instead you can specify ACCESS(NONE).