Previous Topic

Next Topic

Book Contents

Book Index

Control-O Extended Definition Security Calls

Table 60 Control‑O Extended Definition Security Calls

Protected Element

Class
Entity Name

Explanation

Security Module

Controlling Rule Ordering

 

FACILITY

$$CTOORD.qname.owner

qname is the name used to assign different authorizations to various Control‑O environments (for example, Test and Production).
owner is the owner of the rule.

CTOSE01

Controlling Use of Control‑O Commands

 

FACILITY

ON COMMAND
$$CTOONC.qname.cmd-text

ON CTOPCMSG
$$CTOONP.qname.msg-txt

ON DSNEVENT
$$CTODSN.qname.jobname

ON EVENT
$$CTOENV.qname.event-name

ON JOBARRIV
$$CTOJAR.qname.jobname

ON JOBEND
$$CTOJED.qname.jobname

ON MESSAGE
$$CTOONM.qname.msg-id

ON MESSAGE
$$CTOONM.qname.msg-string

ON RULE
$$CTOORL.qname.owner.rule

ON STEP
$$CTOSTP.qname.jobname

ON OMEGAEXP
$$CTOOMG.qname.exception

ON JOBSYSOUT
$$CTOJSO.qname.jobname

ON CTOPCMSG
$$CTOONP.qname.msg-txt

cmd-text is the first 21 chars of command text.

msg-txt is the first 21 chars of the message text.

jobname is the job name in the ON statement.

event-name is the "name" of the event.

jobname is the job name in the ON statement.

jobname is the job name in the ON statement.

msg-id is the MVS message ID.

msg-string is the first 21 chars of MVS message text.

rule is the rule name in the ON statement.

jobname is the job name in the ON statement.

exception is the exception code.

jobname is the job name in the ON statement.

msg-txt is the first 21 chars of the message text.

CTOSE02

 

FACILITY

Runtime security option
$$CTORTS.qname.runtime-sec

DO ASKOPER
$$CTOASK.qname.wtor-text

DO COMMAND
$$CTOCMD.qname.cmd-text

DO COND or RESOURCE
$$CTORES.qname.res-name

DO CTOPCMSG
$$CTOPCM.qname.msg-text

DO DISPLAY with SUPPRESS set to NO
$$CTODSP.qname.new-msg-txt

DO DISPLAY with SUPPRESS set to YES
$$CTOSUP.qname

DO DOM
$$CTODOM.qname

DO TSO
$$CTOTSO.qname.comnd

DO SHELL
$$CTOSHL.qname.scrpt

DO FORCEJOB
$$CTOCMO.qname.lib-name.tbl

DO KSL
$$CTOKSL.qname.ksl-name

DO RULE
$$CTODRL.qname.ownr.rule

DO SET
$$CTOSET.qname.var-name

DO STOPJOB
$$CTOJST.qname

DO SYSREQ
$$CTOSRQ.qname.sysreq-type

runtime-sec is the RUNTSEC value. Valid values: TRIGGER, OWNER, NONE.

wtor-text is the first 21 chars of the WTOR name.

cmd-text is the first 21 chars of command in the DO statement.

res-name is the first 21 chars of the condition or resource name in the DO statement.

msg-text is the first 21 chars of command in the DO statement.

new-msg-txt is the first 21 chars of message text.

new-msg-txt is the first 21 chars of message text.

comnd is the first 21 characters of the command.

scrpt is the first 21 characters of the command.

lib-name is the first 21 characters of the Control-M schedule library.

tbl is the member name in the Control-M schedule library.

The whole entity name is truncated by RACF to 39. This means that tbl will be entirely truncated unless lib-name is less than 21.

ksl-name is the first 21 chars of KSL name in the DO statement.

ownr is the value of the DO RULE owner parameter.

rule is the name of the rule in statement DO RULE.

If the OWNER parameter in the DO RULE statement is empty, then the "owner" in the $$CTODRL.qname.ownr.rule entity will be empty and the entity name will only consist of $$CTODRL.qname.rule.

var-name is the first 21 chars of the IOA AutoEdit variable.

sysreq-type is the SYSREQ option. Valid value: ENQINFO.

CTOSE02

Controlling Use of TSO Commands and KOA Scripts

DO TSO

FACILITY

$$CTOPTS.qname.envprc.cmd-txt

 

cmd-txt is the first 14 chars of the command text in the DO statement.

CTOSE03

DO KSL

FACILITY

$$CTOPKS.qname.envprc.cmd-txt

 

cmd-txt is the first 14 chars of the command text in the DO statement.

CTOSE03

Controlling Access to and Use of the Automation Options Screen

Access to Automation
Options
screen

FACILITY

$$CTOAOP.qname.optnam.ENTRY

 

optnam is the name of the Automation Option selected under screen OA.

CTOSE04

Use of
Automation
Options screen

FACILITY

$$CTOAOP.qname.optnam.obj.act

 

obj is the text (1 – 8 chars) identifying the object on which action was performed.

act is the action (option) selected in screen optnam.

CTOSE04

Controlling Access to and Use of the Rule Status Screen

Initial access to Rule Status
screen

FACILITY

$$CTOPNLOS.qname

 

CTOSE08

Controlling
actions on
rules

FACILITY

Zoom: $$RUL1ZOO.qname.owner

Log: $$RUL1LOG.qname.owner

Resume: $$RUL2RES.qname.owner

Hold: $$RUL2HLD.qname.owner

Free: $$RUL2FRE.qname.owner

Mode: $$RUL2MOD.qname.owner

Delete: $$RUL3DEL.qname.owner

Cancel: $$RUL3CAN.qname.owner

owner is the owner of the rule.

CTOSE08

Controlling Access to Services Provided using the XAM (Extended Automation Mechanism)

 

FACILITY

 

CTOSE15

INIT action

$$CTOXAM.qname.TYPE1INI

 

 

TERM action

$$CTOXAM.qname.TYPE1TRM

 

 

RESOLVE
action

$$CTOXAM.qname.TYPE1RSL

 

 

SETOLOC
action

$$CTOXAM.qname.TYPE2LOC

 

 

SETOGLB
action

$$CTOXAM.qname.TYPE3GLB

 

 

DORULE
action

$$CTOXAM.qname.TYPE3RUL

or

$$CTOXAM.qname.TYPE3RUL.rule name

See Optionally including the target rule name in the checked entity.

 

 

Parent Topic

Control-O Security Interface Modules