PRIVPGM With PPT In Top Secret

Products

• Top Secret

Issue/Introduction

The PPT resource class is being used to protect some load modules and dynamic routines in our CICS regions. When using a PRIVPGM restriction on the PPT permit, on one system it works, but in another system it does not work. Users are able to access unauthorized programs regardless of the PPT and PRIVPGM security.

Resolution

Issue:

TSS LIST(RDT) RESCLASS(PPT)

on the LPAR where PRIVPGM doesn't work.

Does the PPT class have the MASK attribute set? If yes, changing MASK to NOMASK will resolve the problem.

TSS REP(RDT) RESCLASS(PPT) ATTR(NOMASK)

IMPORTANT: If the PPT permits were done while the MASK attribute was set, you will need to TSS REVOKE all permits for the PPT resource class and re-PERMIT then after the NOMASK attribute has been set.

MASKing is not supported by PRIVPGM.