eTrust CA-Top Secret Security for z/OS and OS ... - SupportConnect

PERMITIn eTrust CA-Top Secret, all resources for both VM and MVS are defined in theResource Descriptor Table (RDT). Resources are predefined by eTrust CA-TopSecret or dynamically defined by the particular installation.PERMITThe RACF PERMIT command allows access to resources. The PERMIT commandalso exists in eTrust CA-Top Secret. Use the TSS PERMIT command function toallow designated users to access the indicated data sets in an unlimited or arestricted manner. Restrictions are indicated by incorporating the appropriatePERMIT parameter. For example, the following RACF PERMIT allows USER01to read data set SYS1.PARMLIB:PERMIT SYS1.PARMLIB CLASS(DATASET) ID(user01) ACCESS(READ)In eTrust CA-Top Secret, this would be a permit:TSS PERMIT(user01) DSNAME(SYS1.PARMLIB) ACCESS(READ)RDEFINERDEFINE is used to define resources to RACF.In eTrust CA-Top Secret, the Resource Descriptor Table is a special ACID that isused to define resource classes and their properties. The RDT containspredefined TSS resource classes, including resources used by other ComputerAssociates product interfaces. It also contains dynamically defined resourceclasses. To administer the contents of the RDT Record, the TSS administrator canspecify attributes, access levels, and default access levels using the TSS ADDcommand. The following is an example of creating a User defined resource ineTrust CA-Top Secret using the TSS ADD command:TSS ADD(RDT) RESCLASS(xx)RESCODE(nn)ACLST(ALL=FFFF,UPDATE=6000,READ=4000,CREATE=1000,NONE=0000) ATTR(LONG)B–4 Security Cookbook