MLS and BLP Volume processing in Top Secret

book

Article ID: 198344

calendar_today

Updated On:

Products

CA Top Secret CA Top Secret - LDAP CA Web Administrator for Top Secret

Issue/Introduction

A profile grants the following ...
 
Does the above BLP rule override the MLS restrictions on datasets?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

MLS is checked first, then if that passes, the algorithm will continue to check TSS rules.
The BLP Volume rule will only be checked if the MLS rule passes and if a volume is passed. 
The BLP Volume rule will not override the MLS rules in place.