GDG dataset allocations not failed by Top Secret on the CREATE
search cancel

GDG dataset allocations not failed by Top Secret on the CREATE

book

Article ID: 232901

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

User has READ acesss on the dataset but is allowed to CREATE a dataset.  

 

 

Environment

Release : 16.0

Component : Top Secret for z/OS

Resolution

When a security check occurs for a dataset, there are two security checks.

Access to the volume is checked first. If authorized, then datasett authorization is checked.

CREATE access is not checked at the dataset level but at the volume level.

So, the VOLUME permissions controls CREATE access on that volume.