Is There An Easy Way To Identify A User Type Acid That Doesn't Have a MODE?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

 

 

We need to identify a set of user type acids who don't have any CA Top Secret MODE permitted to them. 

 

 

Is There An Easy Way To Identify A User Type Acid That Doesn't Have a MODE?

Environment

z/OS

Resolution

 

There is no specific way to identify TYPE=USER that don't have a MODE. 

You can issue to know who has got (e.g.) FAIL MODE a TSS WHOH MODE(FAIL). 

It will list all acid having FAIL MODE, but without distinguishing among TYPE=USER or TYPE=PROFILE. 
And this is who has and not who hasn't. 

Also an acid without any mode permitted, will inherit the FACILITY MODE it will run under. 

Additional Information

 

 

If you want to have more information about the CA Top Secret MODEs go to link:

 

https://docops.ca.com/pages/viewpage.action?pageId=273843778

 

It you want to have more information about the CA Top Secret WHOHAS command go to link:

 

https://docops.ca.com/pages/viewpage.action?pageId=273845627