Question:
What does ACTION(FAIL,PASSWORD) on a TSS PERMIT command mean?
Answer:
ACTION(FAIL) forces MODE(FAIL) when the PERMIT is used regardless of the global MODE, FACILITY MODE or user MODE.
Per the CA Top Secret Command Functions Guide, ACTION(PASSWORD) causes a password check for when z/VM minidisks and datasets are accessed.