|
|
|
|
|
The CLASS checked is FACILITY. The entity used to check authorization depends on the user’s request.
For volume definition: $$CTTVOLDEF.qname.volser
For dataset definition: $$CTTVOLDEF.qname.volser.dataset‑name
where volser is the volume serial number of the requested tape volume, and dataset is the requested dataset name on the tape volume.
The following sample commands authorize USERA to dynamically define datasets on the TAPE01 tape volume in the Control‑M/Tape database:
For RACF:
RDEFINE FACILITY $$CTTVOLDEF.qname.TAPE01.* UACC(NONE)
PERMIT $$CTTINITDEF.qname.TAPE01.* ID(USERA) CLASS(FACILITY) ACCESS(READ)
For TopSecret:
TSS ADD(sec-administrator-dept) IBMFAC($$CTTVOLDEF.qname.TAPE01)
TSS PERMIT(USERA) IBMFAC($$CTTVOLDEF.qname.TAPE01) ACC(READ)
For ACF2/SAF:
SET RESOURCE(CMF)
COMP
$KEY($$CTTVOLDEF.qname.TAPE01***************) TYPE(CMF)
UID(USERA) ALLOW
Parent Topic |