Security Considerations › Command Security › SAF Security Call—Command Security

SAF Security Call—Command Security

If OPERSEC=SAF is coded in the Default Options Table, CA XCOM Data Transport makes a standard SAF call to a security package (CA ACF2, IBM RACF, or CA Top Secret) to determine whether the user trying to issue a CA XCOM Data Transport operator command has the authority to issue that command. The user is authorized to issue a particular command if his security profile satisfies the access level defined for the class resource named in the security call. The security resource class queried is the value of the OPERCMDS configuration parameter. The default resource class for CA XCOM Data Transport is OPERCMDS. The general format of the security call is as follows:

XCOM.applsec.command[.parameter[...]]

The components of the security call are explained in the following table:

XCOM

The literal XCOM must be specified as the first element of every security call.

applsec

Specifies the value of the APPLSEC parameter in the Default Options Table, unless it is NONE, in which case the expression XCOM will appear in this position. This component of the security call identifies the CA XCOM Data Transport server.

command

Specifies the name of a CA XCOM Data Transport operator command.

parameter

Specifies the parameters associated with the operator command.

If more than one parameter is used with a command, the parameters must be separated with a period from each other.

Note: There are operator commands with which no parameters are used.