TSS unload and load functions for BMC AMI Extended Terminal Assist for IMS
Consider the following points before creating SAF resource statements for the TSS unload and load functions:
To grant authority for a user to load and simultaneously rename a TSS table, you must create the following SAF resource statements: a TSS.LOAD.tableName statement and a TSS.DEFINE.tableName statement.
Because users can specify generic parameters to unload and load multiple TSS tables through a single request, several SAF resource statements might be required to secure these functions.
If you want to secure the TSS unload and load functions, BMC recommends that you deny all users authority to perform unload and load functions; then, provide specific authority for the users who need to perform the unload and load functions.
The following example illustrates how to restrict the use of the unload function. The same concepts apply to the load function.
To provide only specific users with authority to unload TSS tables, perform the following steps:
Create the resource statement TSS.UNLOAD.* and specify the universal access value NONE.
Modify the TSS.UNLOAD.* statement to specify READ access for the specific users who need authority to unload all TSS tables.
Create TSS.UNLOAD.tableName resource statements that allow other users to unload specific TSS tables.
In this case, a user who is authorized to unload only specific TSS tables cannot execute an unload request with * as the table name; however, if the user specifies a table name for which specific authorization has been granted, the request will be executed.
If you specify the universal access value READ for a TSS.UNLOAD.* or TSS.LOAD.* statement, this statement is the only one that SAF will recognize if a user issues an unload or a load request with * as the table name.