RACF RALTER and RDELETE commands.

[Chris Williams]

What are the equivalent TSSMVS commands to the following RACF commands please?

User TRA02 wants to change the owner and universal access for terminal TERMID01:

RALTER TERMINAL TERMID01 OWNER(TRA02) UACC(ALTER)

User ADM2 wants to remove RACF protection from the terminals protected by the generic profile TERM*:
RDELETE TERMINAL TERM*

I look forward to the replies.


Kind regards
Chris Williams

------------------------------
Senior Software Support Consultant
RSM Partners Limited
------------------------------

[Robert Boerum]

Hi Chris,

1) User TRA02 wants to change the owner and universal access for terminal TERMID01:

RALTER TERMINAL TERMID01 OWNER(TRA02) UACC(ALTER)

To change the owner of a resource, use UNDERCUT:

TSS ADD(dept) TERMINAL(TERMID01) UNDERCUT NOPERMIT

UNDERCUT will transfer the ownership to the new 'dept' and
NOPERMIT will not permit all access to the previous owner after the ownership is transferred.

The TERMINAL resource class in Top Secret does not have access levels. Either a user is permitted to the TERMINAL or not permitted. So there isn't a Top Secret equivalent to change the default access for the TERMINAL resource class. If there is a TERMINAL owned and you want to permit it (or a prefix) to all users, use:

TSS PERMIT(ALL) TERMINAL(xxxx)

2) User ADM2 wants to remove RACF protection from the terminals protected by the generic profile TERM*:

RDELETE TERMINAL TERM*

The TSS equivalent of RDELETE is TSS REMOVE. If you issue TSS WHOOWNS TERMINAL(TERM), does it show an owner? If it is owned, before removing the ownership, you will need to revoke all the permits for the owned resource. You can issue TSS WHOHAS TERMINAL(TERM) to see who is permitted. Once the permits are revoked (TSS REVOKE(acid) TERMINAL(xxxx) ), you can remove the ownership by doing:

TSS REMOVE(dept) TERMINAL(TERM)

Where 'dept' is the department acid that owns the resource.

NOTE: In the communities, be careful not to put any sensitive information here because the posts are available to all community members. 

Best regards,
Bob Boerum