Tape Access Validation BLP and TAPE(OFF)

Products

• Top Secret
• Top Secret - LDAP
• WEB ADMINISTRATOR FOR TOP SECRET

Issue/Introduction

TSS7207E VOLUME vvvvvv REQUESTED ACCESS LEVEL (BLP-RD ) NOT AUTHORIZED

When TAPE(OFF) is defined, Top Secret will not process tape access request validation. From the Top Secret documentation:

OFF
(Default) z/OS will not invoke CA Top Secret to validate a tape access request. TAPE(OFF) is used to indicate the use of external tape management packages such as TMS or TLMS.

Why does Top Secret not bypass the tape volume access request and issue TSS7207E ?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

Top Secret always validates the volume with BLP process regardless of the value of the TAPE control option.

The VOLUME access permission needed for BLP process is ACC(BLP,READ) or ACC(BLP,UPDATE).
These access permissions are used for tape volumes only, not for DASD volumes.