Space banner

   

This space provides the same content as before, but the organization of the home page has changed. The content is now organized based on logical branches instead of legacy book titles. We hope that the new structure will help you quickly find the content that you need.

Common MainView resources

Use this information to customize the distributed resource definitions for common MainView resources.

In addition to the standard high-level resources listed in Security resource definitions listed by product, MainView uses the following high-level entity names to control the common resources:

  • Customize a View

  • Enter ASU Mode

  • Global - Access a Product

  • Global - Attach Product Service Point

  • Global - Connect to CAS

  • Global - Determine trusted status

  • Global - Set Threshold - Save Central

Authorization requests for resources that are common to MainView products are built from the default entity name for the COMMON resource definition as shown in the following table.

Resource name in SERDEF view

Resource definition and considerations

Any Action (Common Views)

Can the user enter view actions in the VIEWS or SCREENS views in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.COMMON.AA

Entity name after substitution: BBM.productid.targetid.COMMON.AA

Customize a View

Can the user enter the CUSTom command to access view customization in any product?

Default entity name: BBM.COMMON.CUSTOM.PA

Default - Alter Data Set

Can the user access a data set?

Note

This resource is distributed as a disabled, rather than an enabled, security call because the security check is done, by default, at a more precise level through the following common resources:

  • Default - Any Table Actions

  • Default - Specific Table Actions

  • SecResource List - Action - Delete

  • Security Resources - Action - Edit

This default resource controls a subset of similar individual resources. Enabling, disabling, or changing this resource automatically enables, disables, or changes all resources with the following entity name:

Class name: DATASET

Entity name: &DSN

Specific resources with this same default entity name can be enabled, disabled, or changed on an individual basis.

Default - Any Table Actions

Can the user enter a view action in a view in the current product?

This default resource controls a subset of similar individual resources. Enabling, disabling, or changing this resource automatically enables, disables, or changes all resources with the following entity name:

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.AO

Entity name after substitution: BBM.productid.targetid.tableid.AO

Specific resources with this same default entity name can be enabled, disabled, or changed on an individual basis.

Default - Set Threshold - Alter Data Set

Can the user access the data set containing threshold definitions?

Note

This resource is distributed as a disabled, rather than an enabled, security call because the security check is done, by default, through the Customize a View view.

Class name: DATASET

Entity name: &DSN

Default - Specific Table Actions

Can the user enter specific view actions in the DIAGMSG, SERDEFL, or SERDEF views?

This default resource controls a subset of similar individual resources. Enabling, disabling, or changing this resource automatically enables, disables, or changes all resources with the following entity name:

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.tableid.actionid.OA

Specific resources with this same default entity name can be enabled, disabled, or changed on an individual basis.

Default - Table Data

Can the user access data for a view in the current product?

This default resource controls a subset of similar individual resources. Enabling, disabling, or changing this resource automatically enables, disables, or changes all resources with the following entity name:

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.tableid.OD

Specific resources with this same default entity name can be enabled, disabled, or changed on an individual basis.

Diagmsg - Action - Off

Can the user enter the OFF command in the DIAGMSG view in the current product to disable a diagnostic messaging option?

Default entity name: BBM.&PRODUCT.&CONTEXT.MYA40.#MSGSDAID.OA

Entity name after substitution: BBM.productid.targetid.MYA40.value.OA

where value represents what is actually displayed in the Option field of the DIAGMSG view.

Diagmsg - Action - On

Can the user enter the ON command in the DIAGMSG view in the current product to enable a diagnostic messaging option?

Default entity name: BBM.&PRODUCT.&CONTEXT.MYA40.#MSGSDAID.OA

Entity name after substitution: BBM.productid.targetid.MYA40.value.OA

where value represents what is actually displayed in the Option field of the DIAGMSG view.

Diagmsg - Any Action

Can the user enter a view action in the DIAGMSG view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.AO

Entity name after substitution: BBM.productid.targetid.MYA40.AO

Diagmsg Table Data

Can the user access the DIAGMSG view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.MYA40.OD

Diagnostic Storage - Table Data

Can the user access the DIAGSTOR view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.MVA50.OD

Note

The DIAGSTOR view displays storage available to the PAS, any key, LSQA, SQA, and CSA. DIAGSTOR should be used only at the request of BMC Software Customer Support and should be protected from unauthorized access.

Enter ASU Mode

Can the user enter the ASU command to place that terminal session in automatic update mode?

Default entity name: BBM.COMMON.ASU.PA

Global - Access a Product

Can the user access this product on this system?

Default entity name: BBM.&SYSTEM.&PRODUCT.&CONTEXT.TA

Entity name after substitution: BBM.systemid.productid.targetid.TA

Global - Attach Product Service Point

Is this address space allowed to define itself as a product?

Default entity name: BBM.&SYSTEM.&PRODUCT.&CONTEXT.TC

Entity name after substitution: BBM.systemid.productid.targetid.TC

Global - Connect to CAS

Can the user connect to a CAS?

Default entity name: BBM.&SSID.CN

Entity name after substitution: BBM.ssid.CN

Global - Determine trusted status

Is the remote PAS a trusted system?

Any user in any address space in a system, whether or not they are previously connected to a CAS, can request data, services, or both from certain products when an appropriate interface is provided. In most circumstances, the system's external security manager (ESM) authorizes requested access to these product resources.

This resource definition is used by products to determine if it is permitted, under certain, well-defined circumstances, to grant access to data, services or both to users signed on to a trusted system without specifically authorizing such access to each user. The distributed default is disabled; all PASs on all systems are trusted. This is usually the case in the majority of instances where the only service points available to a given user are just those on interconnected, trusted systems controlled by a single organization. In these instances, any user in any address space on any system can access only certain product resources (those subject to the trusted system origination test) without having to explicitly sign on to the product or be individually authorized for access.

This resource definition can be enabled on a system where there are remote systems (targets) defined in the sysplex that are not trusted. Each remote PAS's trusted status is determined once at each local system. If the remote PAS's user ID has access to this resource on the local system, it is trusted. Any user signed on to a nontrusted system is handled in the usual way rather than the trusted system 'fast path' exclusion from normal security system authorization. A nontrusted system user requesting access to certain product resources has an ESM security environment created for them locally. It must then be determined if the requesting user has the right to be granted access to the data or services provided by the product under well-defined circumstances.

Default entity name: BBM.&SYSTEM.&PRODUCT.&CONTEXT.TS

Entity name after substitution: BBM.systemid.productid.targetid.TS

Global - Set Threshold - Save Central

Can the user save a threshold to a central place?

Default entity name: BBM.&SYSTEM.&PRODUCT.&CONTEXT.TH

Entity name after substitution: BBM.systemid.productid.targetid.TH

Hist Data Set List - Action - Add

Can the user enter the ADD command in the DSLIST view for the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYAG0.ADD.OA

Hist Data Set List - Action - Dealloc

Can the user enter the D command in the DSLIST view for the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYAG0.UNALLOC.OA

Hist Data Set List - Action - Force

Can the user enter the F command in the DSLIST view for the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYAG0.FORCE.OA

Hist Data Set List - Action - Order

Can the user enter the O command in the DSLIST view for the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYAG0.CHANGE.OA

Hist Data Set List - Action - Quiesce

Can the user enter the Q command in the DSLIST view for the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYAG0.QUIESCE.OA

Hist Data Set List - Action - Reset

Can the user enter the R command in the DSLIST view for the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYAG0.RESET.OA

Hist Data Set List - Action - Save

Can the user enter the SAVE command in the DSLIST view for the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYAG0.SAVE.OA

Hist Data Set List - Action - Unquiesce

Can the user enter the U command in the DSLIST view for the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYAG0.UNQUIESC.OA

Hist Data Set List - Any Action

Can the user enter a DSLIST view action in the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.AO

Entity name after substitution: BBM.productid.targetid.MYAG0.AO

Hist Data Set List - Table Data

Can the user access data for the DSLIST view in the current MainView product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetidd.MYAG0.OD

Menu - Table Data

Can the user access an EZMenu in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.MX100.OD

Metrics - Action - BUILD

Can the user enter the BUILD command in the EZMETRIC, METRICS, METRICZ, METRICZV, or METRICZT views in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MBBZ0.BUILD.OA

Metrics - Any Action

Can the user enter a view action in the EZMETRIC, METRICS, METRICZ, METRICZV, or METRICZT views in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.AO

Entity name after substitution: BBM.productid.targetid.MBBZ0.AO

Metrics - Table Data

Can the user access EZMETRIC, METRICS, METRICZ, METRICZV, and METRICZT views in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.MBBZ0.OD

Plex - Table Data

Can the user access the PLEX, PLEXOVER, TGTACT, and TGTACTZ views in the current product?

Note

The PLEXOVER view is the default view that displays upon access to Plex Manager. An error results for any user who is denied access to this resource through the ESM. You can create a screen definition containing an acceptable view and name it PLEXMGR to avoid error messages occurring for these users when accessing Plex Manager.

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.CCE92.OD

Screens - Table Data

Can the user access the SCREENS view in the current product?

Note

This resource is distributed as a disabled, rather than an enabled, security call because the security check is done, by default, through any security call made to ask if you can access the data in a view. If you select a screen definition that references data you are not permitted to access, the window is opened for the view but no data appears. An error message is displayed that states you are not authorized to display the view data.

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.MCE90.OD

SecResource List - Action - Delete

Can the user enter the DELete command in the SERDEFL view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYA30.DELETE.OA

SecResource List - Alter Data Set

Can the user access the data set containing security resource parameter members?

Note

This resource is distributed as a disabled, rather than an enabled, security call because the security check is done, by default, through the following common resources:

  • Default - Any Table Actions

  • Default - Specific Table Actions

  • SecResource List - Action - Delete

Class name: DATASET

Entity name: &DSN

SecResource List - Any Action

Can the user enter a view action in the SERDEFL view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.AO

Entity name after substitution: BBM.productid.targetid.MYA30.AO

SecResource List - Table Data

Can the user access the SERDEFL view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.MYA30.OD

Security Resources - Action - Edit

Can the user enter the EDIT command in the SERDEF view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MYA20.EDIT.OA

Security Resources - Alter Data Set

Can the user access the data set containing security resource parameter members?

Note

This resource is distributed as a disabled, rather than an enabled, security call because the security check is done, by default, through the following common resources:

  • Default - Any Table Actions

  • Default - Specific Table Actions

  • Security Resources - Action - Edit

Class name: DATASET

Entity name: &DSN

Security Resources - Any Action

Can the user enter a view action in the SERDEF view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.AO

Entity name after substitution: BBM.productid.targetid.MYA20.AO

Security Resources - Table Data

Can the user access the SERDEF view in the current product?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.MYA20.OD

SetAsu - Action - CHANGE

Can the user enter the CHAnge command in the SETASU view?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.PLEXMGR.targetid.MASU0.CHANGE.OA

SetAsu - Action - DEPLOY

Can the user enter the DEPLOY command in the SETASU view?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.PLEXMGR.targetid.MASU0.DEPLOY.OA

SetAsu - Any Action

Can the user enter view actions against data in the SETASU view?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.AO

Entity name after substitution: BBM.PLEXMGR.targetid.MASU0.AO

SetAsu - Table Data

Can the user enter the ASU configuration data in the SETASU view?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.PLEXMGR.targetid.MASU0.OD

Threshold Select - Action - ADD

Can the user add a threshold selection definition?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MBBK0.ADD.OA

Threshold Select - Action - CHANGE

Can the user make any changes to threshold selection definitions in the THRSEL views?

Note

You can create an entity name that is specific to a data element by using the following parameters:

  • #PRODUCT - Product that provides the data

  • #TABLENAME - Table that contains the data

  • #ELEMENT - Element affected by the thresholds

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MBBK0.CHANGE.OA

Threshold Select - Action - DEPLOY

Can the user deploy a threshold selection definition from this system?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MBBK0.DEPLOY.OA

Threshold Set - Action - ADD/COPY

Can the user add a new threshold set definition or copy an existing one?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MBBL0.ADD.OA

Threshold Set - Action - CHANGE

Can the user make any changes to threshold set definitions in the THRSET views?

Note

You can create an entity name that is specific to a data element by using the following parameters:

  • #PRODUCT - Product that provides the data

  • #TABLENAME - Table that contains the data

  • #ELEMENT - Element affected by the thresholds

  • #CTSET - Threshold set name

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MBBL0.CHANGE.OA

Threshold Set - Action - DEPLOY

Can the user deploy a threshold set definition from this system?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MBBL0.DEPLOY.OA

Versions - Action - Restore

Can the user request that a previous version of an object (such as a threshold set definition) be restored?

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.&INTACTION.OA

Entity name after substitution: BBM.productid.targetid.MBBRA.RESTORE.OA

Views - Table Data

Can the user access the VIEWS view in the current product?

Note

This resource is distributed as a disabled, rather than an enabled, security call because the security check is done, by default, through any security call made to ask if you can access the data associated with a specific view. If you select a view that references data you are not permitted to access, an error message is displayed that states you are not authorized to display the view data.

Default entity name: BBM.&PRODUCT.&CONTEXT.&INTTABLE.OD

Entity name after substitution: BBM.productid.targetid.MCE95.OD




Was this page helpful? Yes No Submitting... Thank you

Comments