Running a CA Top Secret TSSPROT utility report with a P SIM command to check access to SYS1.xxxx dataset What does "IGNORED - ALREADY PROTECTED" and "PROTECTED" mean?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Running a CA Top Secret TSSPROT utility report with a P SIM command to check access to SYS1.xxxx dataset

What does "IGNORED - ALREADY PROTECTED" and "PROTECTED" mean?

Example:

SYS1.JES2 IGNORED - ALREADY PROTECTED
SYS1.ABC PROTECTED

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component:

Resolution

To display SYS1.xxx.xxxx, use:

 

PROTECT SIM DSN(SYS1.xxx.xxxx) VOL(volser) 

 

where 'volser' is the volume the dataset resides on

If the output shows:

 

SYS1.xxx.xxxx               IGNORED ALREADY PROTECTED

 

then the RACF bit is on

If the output shows:

 

SYS1.xxx.xxxx PROTECTED 

 

then the RACF bit is NOT on. The 'SIM' operand does not process the dataset, so if the RACF bit isn't already on, 'SIM' won't cause the RACF bit to be turned on.

Assuming the RACF bit is on, to turn it off for the dataset, use:

 

UNPROTECT DSN(SYS1.xxx.xxxx) VOL(volser) 

 

where 'volser' is the volume the dataset resides on PROTECT SIM will show all datasets on the system and whether or not they are protected.

PROTECT SIM VOLUME(volser) will show all datasets on that volume and whether or not they are protected.

Automatic dataset protection (ADSP) was a feature that allowed the default protection of datasets prior to the introduction of the SAF interface by IBM. Protection of datasets by default is a standard feature of the SAF interface and negates the need for ADSP.