Define Resource Class TMEADMIN Rules in Top Secret

Products

• Top Secret
• Top Secret - LDAP

Issue/Introduction

Tivoli Dynamic Workload console is being implemented with Top Secret. One of the requirements is defining a resource class of TMEADMIN. The equivalent RACF and ACF2 commands are as follows.

For ACF2:

    ACF 
    SET CONTROL(GSO) 
    INSERT CLASMAP.TMEADMIN ENTITYLN(246) RESOURCE(TMEADMIN) RSRCTYPE(TME) 
    F ACF2,REFRESH(CLASMAP) 

Sample RECKEY commands to add the Resource rule:

    SET RESOURCE(TME)
    RECKEY SCOT@pelican ADD( UID(uid string) ALLOW)
    RECKEY SCOT@pelican ADD($USERDATA(SCOT))

For RACF:

    RDEFINE TMEADMIN SCOT@hostname APPLDATA(’SCOT’)

Environment

Release:
Component: TSSMVS

Resolution

For Top Secret: 

    TSS ADD(RDT) RESCLASS(TMEADMIN) RESCODE(nnn) MAXLEN(246) ATTR(MIXED) POSIT(26) 

Where ‘nnn’ is an unused rescode between x’101’ and x’13F’ on your system (check with TSS LIST(RDT) RESCODE(nnn) ) 

    TSS ADD(dept) TMEADMIN(SCOT@hostname) 

where 'dept' is the department you want to own the resource 

    TSS PERMIT(acid) TMEADMIN(SCOT@hostname) APPLDATA('SCOT') 

where 'acid' is the users' acid, an attached profile, or the ALL record if all users should have access.