|
|
|
|
|
Online Environment
The CLASS checked is FACILITY. The entity used to check authorization depends on the type of request:
Table 79 CTTSE06 Extended Definition Authorization Entity
Request |
Entity |
|---|---|
INIT Control‑M/Tape BATCH |
$$CTTINIT.qname |
CHECKIN |
$$CTTRECINS.qname.extension |
UPDATE RECORD |
$$CTTRECUPD.qname.extension |
DELETE RECORD |
$$CTTRECDEL.qname.extension |
CHECKOUT |
$$CTTCHKOUT.qname.volser |
BACK‑IN‑LIBRARY |
$$CTTBACKLB.qname.volser |
CLEAN |
$$CTTCLNVOL.qname.volser |
DELETE |
$$CTTDELVOL.qname.volser |
EXPIRE |
$$CTTEXPIRE.qname.dataset |
EXTEND |
$$CTTEXTEND.qname.dataset |
VAULT |
$$CTTVAULT.qname.volser |
RECALL |
$$CTTRECALL.qname.volser |
SELECT |
$$CTTSELECT.qname.extension |
GROUP |
$$CTTGROUP.qname.volser |
ADDINFO |
$$CTTADDINF.qname.extension |
UNSCRATCH |
$$CTTUNSCR.qname.volser |
where extension is the volume serial number or dataset name, depending on the current request.
Real-time Environment
When a user tries to process a dataset, the Control‑M/Tape SVC calls the CTTSE06 security module. The CLASS checked is FACILITY. The entity used to check authorization depends upon the user’s request.
Table 80 Real-time Authorization Entities
Entity |
Use |
|---|---|
$$CTTRECINS.qname.volser |
For dynamic definition of a volume |
$$CTTRECINS.qname.dataset |
For creation of a new dataset |
$$CTTRECUPD.qname.volser |
For any access to a volume |
$$CTTRECUPD.qname.dataset |
For any access to a dataset |
Security checks are bypassed when called from the Control‑M/Tape SVC environment.
Special Utility Processing
When called under the batch environment from a Control‑M/Tape utility, the CTTSE06 module performs one additional security check for the INIT request.
The CLASS checked is FACILITY. The entity checked is $$CTTBYSEC.qname.
If the user is granted access to this entity, the user is permitted to work in a special mode and all further security checks are bypassed for improved batch utility performance.
This check is performed only after user authority to make INIT Control‑M/Tape BATCH requests has been verified.
Parent Topic |