OPERCMDS option with two permits defined

Products

• Top Secret

Issue/Introduction

OPERCMDS: 
If an id has  ACCESS = ALL  from a profile  OPERCMDS(MVS.)  
and also there is a profile PER(ALL) OPERCMDS(MVS.VARYLOGON.CN) ACC(NONE)  
set in the system.

Which one will take precedence for an id?  

 

 

Environment

Release : 16.0

Component : CA Top Secret for z/OS

Resolution

If TSS control option AUTH(OVERRIDE,ALLOVER) is set then the permit  OPERCMDS(MVS.)  in a PROFILE
will be picked up by TSS. 
TSS would not go to the ALL record. 

But if both permits were in the same PROFILE then the one with ACCESS(NONE) will be used by TSS.