Convert RACF commands to TSS to implement CICS command Level Security.

Products

• Top Secret

Issue/Introduction

Need to convert the following RACF commands to TSS in order to implement CICS command level security.

RDEFINE VCICSCMD CMDSAMP UACC(NONE)       
NOTIFY(sys_admin_userid) 
ADDMEM(AUTINSTMODEL, AUTOINSTALL, CONNECTION, 
DSNAME, TRANSACTION, TRANDUMPCODE, VTAM)

Resolution

Following are the converted RACF commands to TSS:

TSS ADDTO(deptacid) SPI(AUTOINST)       
TSS PERMIT(acidname) SPI(AUTOINST) ACCESS(xxxxxxx) 

TSS ADDTO(deptacid) SPI(CONNECTI)       
TSS PERMIT(acidname) SPI(CONNECTI) ACCESS(xxxxxxx) 

TSS ADDTO(deptacid) SPI(DSNAME)       
TSS PERMIT(acidname) SPI(DSNAME) ACCESS(xxxxxxx) 

TSS ADDTO(deptacid) SPI(TRANSACT)       
TSS PERMIT(acidname) SPI(TRANSACT) ACCESS(xxxxxxx) 

Set the CICS SIT parameter to XCMD=YES to activate SPI security checking.