|
|
|
|
|
Initial Access to the Active Balancing Environment Screen
IOA verifies authorization for the option in which the CLASS checked is FACILITY unless otherwise specified. The entity checked is $$CTBPNLB.qname
Subsequent Operations in the Active Balancing Environment Screen
For every action that is performed on this screen, IOA verifies authorization for the action.
RACF Security
For this verification:
Entity Checked: owner.SUBMIT
Class: SURROGAT
where owner is the user ID specified as the owner of the Control‑M/Analyzer balancing mission.
If the logged on user (current user) is allowed to submit jobs on behalf of another user, the current user is also allowed to order Control‑M/Analyzer balancing missions owned by the other user.
The commands to permit USERA to order a balancing mission with an owner of USERB are:
RDEFINE SURROGAT USERB.SUBMIT UACC(NONE)
PERMIT USERB.SUBMIT ACCESS(READ) ID(USERA) CLASS(SURROGAT)
TopSecret Security
The TopSecret Application Interface module (TSSAI) is called with the following parameters:
Resource Class: ACIDCHK
Resource Name: userid (as specified in the OWNER field)
where userid is the user ID specified as the owner of the Control‑M/Analyzer balancing mission.
If the logged on user is allowed to submit jobs on behalf of another user, it is assumed that the logged on user is also allowed to order Control‑M/Analyzer balancing missions owned by that user.
The command to permit USERA to order a balancing mission with an ownerid of USERB is:
TSS PERMIT(USERA) ACID(USERB)
ACF2/SAF Security
For this verification:
Entity Checked: $SUBMIT.owner
Class: FACILITY
where owner is the user ID specified as the owner of the Control‑M/Analyzer balancing mission.
The ACF2 commands to permit USERA to order a balancing mission with an owner of USERB are:
SET RESOURCE(CMF)
COMP
$KEY($SUBMIT.USERB) TYPE(CMF)
UID (USERA) ALLOW
Parent Topic |