Different CVDA Values from CTS 5.4 and CTS 5.5 Running CA Top Secret

book

Article ID: 141221

calendar_today

Updated On:

Products

CA Top Secret CA Top Secret - LDAP

Issue/Introduction

READ and UPDATE access levels are being reported by CVDA values when going from CTS 5.4 to CTS 5.5. 

 

Example output:

ID USERA has:

PROFILES   = $CI00001

 

Profile $CI00001 has:

XA SPI     = JVM                                           OWNER(CIAPP5  )

   ACCESS  = INQUIRE

XA SPI     = JVM                                           OWNER(CIAPP5  )

   ACCESS  = SET

XA SPI     = JVM                                           OWNER(CIAPP5  )

   ACCESS  = DISCARD

XA SPI     = JVM                                           OWNER(CIAPP5  )

   ACCESS  = CREATE

XA SPI     = JVMSERVE                                      OWNER(CIAPP5  )

   ACCESS  = INQUIRE

XA SPI     = JVMSERVE                                      OWNER(CIAPP5  )

   ACCESS  = SET

XA SPI     = JVMSERVE                                      OWNER(CIAPP5  )

   ACCESS  = DISCARD

XA SPI     = JVMSERVE                                      OWNER(CIAPP5  )

   ACCESS  = CREATE

 

In CTS 5.4, if USERA logs into a region and issues the following, they get the listed result:

CECI QUERY SECU RESTYPE('SPCOMMAND') RESID('JVMSERVER')

STATUS:  COMMAND EXECUTION COMPLETE                         NAME=

EXEC CICS  Query Security

  ( RESType( 'SPCOMMAND   ' ) | RESClass() RESIDLength() )

  RESID( 'JVMSERVER                                        ' ... )

  < LOGMessage() | LOG | Nolog >

  < REAd( +0000000035 ) >

  < Update( +0000000037 ) >

  < Control( +0000000057 ) >

  < Alter( +0000000053 ) >

RESPONSE: NORMAL                EIBRESP=+0000000000 EIBRESP2=+0000000000

 

In CTS55, repeating the same actions by the same user, the listed result is:

CECI QUERY SECU RESTYPE('SPCOMMAND') RESID('JVMSERVER')

STATUS:  COMMAND EXECUTION COMPLETE                         NAME=

EXEC CICS  Query Security

  ( RESType( 'SPCOMMAND   ' ) | RESClass() RESIDLength() )

  RESID( 'JVMSERVER                                        ' ... )

  < LOGMessage() | LOG | Nolog >

  < USerid() >

  < REAd( +0000000036 ) >

  < UPdate( +0000000038 ) >

  < Control( +0000000057 ) >

  < Alter( +0000000053 ) >

RESPONSE: NORMAL                EIBRESP=+0000000000 EIBRESP2=+0000000000

 

 



Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

SO11115