Sailpoint Integration

Products

• Top Secret

Issue/Introduction

Upgraded to the latest release of Sailpoint which requires CASECAUT(TSSCMD.ADMIN.MODIFY)  after Top Secret APARS SO12760 and SO13014.

What authority does CASECAUT(TSSCMD.ADMIN.MODIFY) grant a user?

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

Giving a user CASECAUT(TSSCMD.ADMIN.MODIFY) gives the user the ability to issue TSS MODIFY commands which includes issuing them on the console.

TSS MODIFY allows you to change and display Top Secret security setting temporarily and stopping/starting Top Secret.

The PTFs fix problems with the security check not occurring at all which allowed users without the authority to issue MODIFY commands.