Top Secret CASECAUT TSS7251E Violations Continue after Apar SO11001

Products

• Top Secret

Issue/Introduction

TSS7250E 136 J=TSS A=xxxx TYPE=CASECAUT RESOURCE=TSSCMD.ADMIN.MODIFY

TSS7251E Access Denied to CASECAUT <TSSCMD.ADMIN.MODIFY>

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

The CASECAUT permission for MODIFY commands does not support specific commands, which is why using TSSCMD.ADMIN.MODIFY.STATUS fails.  The check is only for TSSCMD.ADMIN.MODIFY.  

For MODIFY commands which only provide status or display information, such as the STATUS command, ACCESS(USE) is all that is required.  For any other MODIFY command, ACCESS(PRIVILEG) is required to be able to issue if there is no CONSOLE authority for the user.
Restricted Administrative Authorities (CASECAUT Resource Class)