Does CONTROL access level imply READ access level for SDSF?
search cancel

Does CONTROL access level imply READ access level for SDSF?

book

Article ID: 222146

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

Does CONTROL access level imply READ access level for SDSF resclass? 

Does 
PERMIT(acid) SDSF(ISF)                           ACC(CONTROL)
imply: 
PERMIT(acid) SDSF(ISF)                           ACC(READ)

Environment

Release : 16.0

Component :

Resolution

No, CONTROL access level does not imply READ. 


Listing the RDT for the SDSF resclass reveals the bit settings for the access levels:

 
tss list(rdt) resclass(sdsf)
 ACCESSORID = *RDT*     NAME       = RESOURCE DEFINITIONS
   RESOURCE CLASS = SDSF
    RESOURCE CODE = X'09B'   POSIT =    100
        ATTRIBUTE = MASKABLE,MAXOWN(26),MAXPERMIT(063),ACCESS
           ACCESS = NONE(0000),CONTROL(0400),UPDATE(6000),READ(4000)
           ACCESS = ALL(FFFF)
           DEFACC = READ
 TSS0300I  LIST     FUNCTION SUCCESSFUL
 READY

For a predefined resource class such as SDSF, the CONTROL access level (whose hex value is 0400) does not imply the READ (hex value of 4000) access levels. The UPDATE (hex 6000) access level does encompass READ + WRITE access levels. That is, UPDATE 6000hex encompasses READ 4000hex + WRITE 2000hex. And, ALL (hex FFFF) encompasses everything.

That is: 
PERMIT(acid) SDSF(ISF)                           ACC(UPDATE)
implies: 
PERMIT(acid) SDSF(ISF)                           ACC(READ)
and 
PERMIT(acid) SDSF(ISF)                           ACC(WRITE)
even though ACCESS(WRITE) is not listed. 

Additional Information

DEFACC Keyword—Assign Resource Default Access