Previous Topic

Next Topic

Book Contents

Book Index

Control-O Basic Definition Security Calls

Table 59 Control‑O Basic Definition Security Calls

Protected Element

Class
Entity Name

Explanation

Security Module

Controlling Rule Ordering

 

SURROGAT
owner.SUBMIT

ACIDCHK
owner

FACILITY
$SUBMIT.owner

owner is the owner of the rule.

CTOSE01

Controlling Use of Control‑O Commands

 

FACILITY

ON COMMAND
$$IOACMD.qname.cmd-text

ON CTOPCMSG
$$CTOPCM.qname.msg-txt

ON DSNEVENT
$$CTODSN.qname.jobname

ON EVENT
$$CTOENV.qname.event-name

ON JOBARRIV
$$CTOJAR.qname.jobname

ON JOBEND
$$CTOJED.qname.jobname

ON JOBSYSOUT
$$CTOJSO.qname.jobname

ON MESSAGE
$$CTOMSG.qname.msg-id

ON MESSAGE
$$CTOONM.qname.msg-string

ON OMEGAEXP
$$CTOOMG.qname.exception

ON RULE
$$CTORUL.qname.owner.rule

ON STEP
$$CTOSTP.qname.jobname

 

qname is the name used to assign different authorizations to various Control‑O environments (for example, Test and Production).
cmd-text is the first 21 chars of command text.

msg-txt is the first 21 chars of the message text.

jobname is the job name in the ON statement.

event-name is the "name" of the event.

jobname is the job name in the ON statement.

jobname is the job name in the ON statement.

jobname is the job name in the ON statement.

msg-id is the MVS message ID.

 

msg-string is the first 21 chars of MVS message text.

exception is the exception code.

 

rule is the rule name in the ON statement.

jobname is the job name in the ON statement.

CTOSE02

 

FACILITY

Runtime security option
$$CTORTS.qname.runtime-sec

DO ASKOPER
$$CTOASK.qname.wtor-text

DO COMMAND
$$IOACMD.qname.cmd-text

DO COND or RESOURCE
$$IOARES.qname.res-name

DO CTOPCMSG
$$CTOPCM.qname.msg-text

DO DISPLAY with SUPPRESS set to NO
$$CTOMSG.qname.new-msg-txt

DO DISPLAY with SUPPRESS set to YES
$$CTOMSG.qname.new-msg-txt

DO DOM
$$CTODOM.qname

DO TSO
$$CTOTSO.qname.comnd

DO SHELL
$$CTOSHL.qname.scrpt

DO FORCEJOB
$$CTOCMO.qname.lib-name.tbl

DO KSL
$$CTOKSL.qname.ksl-name

DO RULE
$$CTORUL.qname.ownr.rule

DO SET
$$CTOSET.qname.var-name

DO STOPJOB
$$CTOJST.qname

DO SYSREQ
$$CTOSRQ.qname.sysreq-type

runtime-sec is the RUNTSEC value. Valid values: TRIGGER, OWNER, NONE.

wtor-text is the first 21 chars of the WTOR name.

cmd-text is the first 21 chars of command in the DO statement.

res-name is the first 21 chars of the condition or resource name in the DO statement.

msg-text is the first 21 chars of command in the DO statement.

new-msg-txt is the first 21 chars of message text.

new-msg-txt is the first 21 chars of message text.

comnd is the first 21 characters of the command.

scrpt is the first 21 characters of the command.

lib-name is the first 21 characters of the Control-M schedule library.

tbl is the member name in the Control-M schedule library.

The whole entity name is truncated by RACF to 39. This means that tbl will be entirely truncated unless lib‑name is less than 21.

ksl-name is the first 21 chars of KSL name in the DO statement.

ownr is the value of the DO RULE owner parameter.

rule is the name of the rule in statement DO RULE.

var-name is the first 21 chars of the IOA AutoEdit variable.

sysreq-type is the SYSREQ option. Valid value: ENQINFO.

CTOSE02

Controlling Use of TSO Commands, KOA Scripts, and z/OS Shell Scripts

DO TSO

FACILITY

$$CTOPRC.qname.envprc
$$CTOTSO.qname.envprc

 

CTOSE03

DO SHELL

FACILITY

$$CTOSHL.qname.envprc

 

CTOSE03

DO KSL

FACILITY

$$CTOPRC.qname.envprc
$$CTOKSL.qname.envprc

 

 

Controlling Access to and Use of the Automation Options Screen

Access to Automation
Options
screen

FACILITY

$$CTOAOP.qname.optnam.ENTRY

optnam is the name of the Automation Option selected under screen OA.

CTOSE04

Use of
Automation
Options screen

FACILITY

$$CTOAOP.qname.optnam.obj

obj is the text (1 – 8 chars) identifying the object on which action was performed.

act is the action (option) selected in screen optnam.

CTOSE04

Controlling Access to and Use of the Rule Status Screen

Initial access to Rule Status
screen

FACILITY

$$CTOPNLOS.qname

 

CTOSE08

Controlling
actions on
rules

SURROGAT
owner.SUBMIT

ACIDCHK
owner

FACILITY
$SUBMIT.owner

owner is the owner of the rule.

CTOSE08

Controlling Access to Services Provided using the XAM (Extended Automation Mechanism)

All actions
listed below

FACILITY
$$CTOXAMF.qname

 

CTOSE15

INIT action

 

 

CTOSE15

TERM action

 

 

CTOSE15

RESOLVE
action

 

 

CTOSE15

SETOLOC
action

 

 

CTOSE15

SETOGLB
action

 

 

CTOSE15

DORULE
action

 

 

CTOSE15

Parent Topic

Control-O Security Interface Modules