Prefixing WHOHAS queries in CASECAUT and UNIXPRIV

[Anon Anon]

I stumbled across a behavior in TSS that I don't understand:

 

We have rules defined in CASECAUT(TSS) and UNIXPRIV(CHOWN)—that is, those are owned, and there are privileges issued under them.  When I do a WHOHAS on either one, I get the normal listing.

 

When I do a WHOHAS UNIXPRIV(C), I'm shown the CHOWN owner and all permissions, just as though I'd spelled out "CHOWN".  This makes sense to me.

 

But when I do WHOHAS CASECAUT(T), I get this:

   TSS0240E  INVALID RESOURCE NAME

   TSS0301I  WHOHAS   FUNCTION FAILED, RETURN CODE =  4

 

 

On the other hand I can do the same thing with CASECAUT(TS) and get the correct listing as though I'd spelled out CASECAUT(TSS).

 

I infer that both classes can be "prefixed", but that CASECAUT has a minimum prefix length of 2 and UNIXPRIV of 1.  I trot off to the RDT, therefore, to see what controls that (I don't know much about class definitions yet), but don't see anything that explains it.

 

I don't have to know, but I'm curious:  What's the difference here?

[Joseph Porto]

Robert,

 

Need to investigate your question. Couldnt find anything on our problem tracking system that explains why one character works for one resource class and not the other for a WHOHAS command.

 

Will definitely get back to you. I will open a support ticket to track your question and get you an answer.

 

Regards,

 

Joseph Porto - CA Level 1 Support

[Joseph Porto]

Bob,

 

OK here is what I found out and tested.

 

Resource class that have the attribute of NOMASK allows for only one character on the TSS WHOHAS command.

 

tss list(rdt) resclass(otran)

ACCESSORID = *RDT*     NAME       = RESOURCE DEFINITIONS

 

   RESOURCE CLASS = OTRAN

    RESOURCE CODE = X'06E'

        ATTRIBUTE = NOMASK,MAXOWN(08),MAXPERMIT(008),ACCESS

           ACCESS = NONE(0000),UPDATE(6000),EXECUTE(4000),INSTALL(0400)

           ACCESS = INQUIRE(0080),SET(0040),COLLECT(0002),ALL(FFFF)

           DEFACC = EXECUTE

TSS0300I  LIST     FUNCTION SUCCESSFUL

READY

 

tss whohas otran(a)

OTRAN      = A                                             OWNER(IDENNIS )

  XAUTH     = A                                              ACID(HARBEWS )

    ACCESS  = EXECUTE

 

TSS0300I  WHOHAS   FUNCTION SUCCESSFUL

READY

 

 

 

Resource classes with MASK, require at least 2 characters when using the TSS WHOHAS command.

 

tss list(rdt) resclass(casecaut)

ACCESSORID = *RDT*     NAME       = RESOURCE DEFINITIONS

 

   RESOURCE CLASS = CASECAUT

    RESOURCE CODE = X'156'   POSIT =    592

        ATTRIBUTE = MASKABLE,MAXOWN(26),MAXPERMIT(044),ACCESS,DEFPROT

           ACCESS = NONE(0000),GRANT(1C00),CONTROL(6400),PRIVILEG(6000)

           ACCESS = UPDATE(2000),USE(4000),ALL(FFFF)

           DEFACC = USE

TSS0300I  LIST     FUNCTION SUCCESSFUL

READY

 

tss whohas casecaut(t)

TSS0240E  INVALID RESOURCE NAME

TSS0301I  WHOHAS   FUNCTION FAILED, RETURN CODE =  4

READY

 

Please let me know if there are any questions.

 

Regards,

Joseph Porto - CA Level 1 Support

[Anon Anon]

Thanks, Joe.  In that case I probably won't bother remembering which of my resources are which; I'll just try it one way and then the other.

 

Is this behavior documented anywhere?  I'm still learning my way around.

[Joseph Porto]

Bob,

 

I will be submitting a doc update to have this information added. I will also create a knowledge document with the same information.

 

Please let me know if there is anything else that you need.

 

Regards,

 

Joseph Porto - CA Level 1 Support