Define CA 7 As a Resource

Implementing Security with CA ACF2 › Define CA 7 As a Resource

Define CA 7 As a Resource

You can define CA WA CA 7 Edition to CA ACF2 as a resource to control LOGON access. The resource definition for CA WA CA 7 Edition under CA ACF2 is not required; however, it does provide an additional level of security for restricting access to CA WA CA 7 Edition. If CA ACF2 is to control LOGON security for CA WA CA 7 Edition, a resource check is made during LOGON. The resource check determines whether the user is authorized to access CA WA CA 7 Edition.

Follow these steps:

Define a Resource Rule under CA ACF2 identifying CA WA CA 7 Edition as a resource. If you are using CA ACF2 6.0 or higher, define a CLASMAP for APPL:
```
CLASMAP.CA7 RESOURCE(APPL) RSRCTYPE(APP)
```
Compile and store the resource rule under CA ACF2.
Add the APPL= keyword to the SECURITY statement in the CA WA CA 7 Edition initialization file and specify the resource name.
Add the LOGON keyword to the EXTERNAL= parameter list on the SECURITY statement in the CA WA CA 7 Edition initialization file.

The following is an example CA ACF2 application resource rule for CA WA CA 7 Edition:

  $KEY(CA7) TYPE(APP)
  *.........allow access                   comment statement
   UID(local UID string) ALLOW
  *.........disallow access                comment statement
   UID(local UID string) PREVENT
  *

$KEY(CA7): Specifies the CA ACF2 keyword used to name the resource to protect. CA7 is the name used in this example and must match the APPL= value on the SECURITY statement.
TYPE: Identifies the type of resource rule. (APP = Application resource type)
UID: Identifies the UID string of users to permit or prevent accessing this resource.
ALLOW: Specifies the CA ACF2 keyword used to grant access to a resource.
PREVENT: Specifies the CA ACF2 keyword used to deny access to a resource.

Note: The Application Resource rule does not take effect until the rule is compiled and stored under CA ACF2. For more information about compiling and storing rules, see the CA ACF2 Administrator Guide (for z/OS).