How to create and use the class $BETA?

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Question:

 

-How to create and use the class $BETA?

-When creating this class, how to define the access list correctly? What is the order of access levels to define?

 

 

Answer: 

 

 

-When defining a new RDT entry the access levels in ACLST needs to be in descending order. 

 

Then access levels within the ACLST should be unique and in descending hexadecimal order so that permits with multiple access levels display the highest possible access level. 

 

For example, if the list specifies READ,UPDATE=6000; the UPDATE implies READ and a permit is issued for UPDATE access. 

Then the TSS LIST command will show that the permit includes READ access and will display READ instead of UPDATE. 

 

To display correctly the access levels, they must be defined like it follows:

 

The access level is displayed correctly if the ACLST is specified as UPDATE=6000,READ. 

 

The command should be: 

 

TSS ADD(RDT) RESCLASS($BETA) ACLST(ALL,UPDATE=6000,READ,CONTROL,NONE) DEFACC(READ) 

 

 

Additional Information:

 

 

 

-With CA Top Secret r15.0, refer to CA Top Secret for z/OS Command Reference Guide.

-With CA Top Secret r16.0, refer to docops.ca.com site.

Environment

Release: TOPSEC00200-15-Top Secret-Security
Component: