Top Secret resclass is DB2 REST services

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

How to enable RESTfull services on DB2/z (for the first time) in Top Secret.

 

For RACF:

define profile DB2T.REST for subsystem DB2T with a universal access authority of NONE:

RDEFINE DSNR (DB2T.REST) OWNER(DB2OWNER) UACC(NONE)

You can then issue the RACF PERMIT command to give users access to profile DB2T.REST. For example, you can issue the following command to authorize user DB2USER1 access to profile DB2T.REST:

PERMIT DB2T.REST CLASS(DSNR) ID(DB2USER1) ACCESS(READ)

Environment

Release : 2.1

Component : CA Top Secret for z/OS

Resolution

The Top Secret equivalents to the RACF commands are:

TSS ADD(dept) DB2(DSNR.DB2) (if not already owned). 

The maximum length of a resource name in class DB2 in a TSS ADD command is 8 characters.

For TSS PERMIT, the maximum length is 44 characters.)

TSS PER(acid) DB2(DSNR.DB2T.REST) ACC(READ)