MLS and BLP Volume processing in Top Secret

Products

• Top Secret
• Top Secret - LDAP
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

 
Do BLP rules override MLS restrictions on datasets?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

MLS is checked first, then if that passes, the algorithm will continue to check TSS rules.
The BLP Volume rule will only be checked if the MLS rule passes and if a volume is passed. 
The BLP Volume rule will not override the MLS rules in place.