Permit MODE(WARN) in Top Secret
search cancel

Permit MODE(WARN) in Top Secret

book

Article ID: 33692

calendar_today

Updated On:

Products

Top Secret

Issue/Introduction

Is TSS PERMIT with ACCESS(NONE) and MODE(WARN) valid? 
This would enable users to continue working and identify who needs a permit.

 

 

  

 

 

 

Resolution

There is no way to code a rule in WARN mode, ie ACTION(WARN) is not valid on a TSS PERMIT command. (Only ACTION(FAIL) is valid.)

In FAIL mode, once the resource is defined to Top Secret, or the DEFPROT attribute is set on the resource class, a user must be explicitly permitted to access to the resource. 

For this situation, the following action is recommended: 

 
TSS PER(ALL) class(SpecificResource) ACCESS(ALL) ACTION(AUDIT) 
 
and run TSSUTIL report:
 
REPORT EVENT(AUDTA) class(Report) END