Previous Topic: FAIL ModeNext Topic: Implementing Default Protection


Mode by Event

Mode by event can be effected through the ACTION parameter on the TSS PERMIT command, or through the DRC control option.

ACTION Parameter

Allows you to put a specific permission in FAIL mode no matter which mode the user is in. This allows you to protect critical resources from users who are in the implementation process but are not yet in FAIL mode, or from undefined users. It can also enforce the use of VMPRIV in DORMANT mode.

The ACTION parameter also allows you to specify what access rights are authorized for QUERY and other such ambiguous commands by using the VMPRIV operand.

VMUSER Parameter

Allows you to apply VMPRIV to certain commands so that when executed they affect a specific VM userid.

DRC Control Option

Allows you to specify that selected violations, if incurred, always fail the attempt. This allows you to fail specific unauthorized access attempts even if the user is in DORMANT or WARN mode.