TSS WHOHAS DSN(xxxx) For Specific Dataset Showing Other Datasets

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

When using the TSS WHOHAS command to see who is permitted to a specific dataset, other datasets appear in the output. Note that this is a full dataset name being specified: 

TSS WHOHAS DATASET(SYS1.ABC123) 

returns entries such as this (among other valid entries): 

SYS1.*.USER.XYZ789

Is there a mechanism to make WHOHAS interpret the resource name specified as a full/exact resource name and not interpret it as a prefix? 

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

To see permits specifically for DATASET(SYS1.ABC123), put the dataset name in quotes or use DATA(LITERAL) on the WHOHAS command: If using the quotes, be sure CA Top Secret r15 fix RO52490 is applied first to correct a problem where the output with the resource name in quotes matches the output without the quotes. 

For example:
TSS WHOHAS DATASET('SYS1.ABC123') 
TSS WHOHAS DATASET(SYS1.ABC123) DATA(LITERAL) 


TSS WHOHAS DATASET('SYS1.ABC123') should show the shorter matches such as SYS1.*, SYS0.*B, etc but not show the longer resource names such as SYS1.*.USER.XYZ789.
TSS WHOHAS DATASET(SYS1.ABC123) DATA(LITERAL) should show the acids that are permitted to exactly SYS1.ABC123. It will not show anything like SYS1.*, SYS1.*L, etc that would be a match.