$TAPEVOL With Top Secret TSSSIM Shows Access Allowed But Should Be Denied
search cancel

$TAPEVOL With Top Secret TSSSIM Shows Access Allowed But Should Be Denied

book

Article ID: 266293

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

When running TSSSIM with $TAPEVOL(xxxxxx), the results show access is allowed when it should be denied. VOLUME(xxx(G)) is defined to Top Secret and VOLUME(xxxxxx) is permitted to the ALL record with ACCESS(NONE). There aren't any matching permits on the user ACID or any attached profiles. TSSSIM output shows:

   === CMD      ==> LOGON ACID(aaaaaa) FAC(fac) TRACE
    === RACINIT  ==> ACID    = aaaaaa          NAME    = name
                 ==> REG15   = 00               FDB-RC  = 00           FDB-DRC = 00
                 ==> SECURITY OVERRIDES:  <NONE>

    === INFO     ==> TSS8370I SIMULATED SESSION SUCCESSFULLY ESTABLISHED.

  
    === CMD      ==> $TAPEVOL(xxxxxx) ACCESS(UPDATE)
    === RACHECK  ==> TSS8380I RESOURCE ACCESS ALLOWED
                 ==> REG15   = 00               FDB-RC  = 00           FDB-DRC = 00
                 ==> REQUEST = 6000               ALLOWED = 0000           VOLUME  = 0000
                 ==> REASON  = N/A
                 ==> VOL-FLG = 00-00-00-00                             SUB-FLG = 00-00-00-00-01
  
    === CMD      ==> END

Environment

Release : 16.0

Resolution

Check the TAPE(...) control option in Top Secret. This needs to be set to TAPE(DEF) for $TAPEVOL to work with TSSSIM and protected volumes.