JAL: link repair

2016-11-30T21:45:41Z

link repair

← Older revision		Revision as of 21:45, 30 November 2016
Line 35:		Line 35:

	<tr><th>TOPSECRET</th>		<tr><th>TOPSECRET</th>
	<td>The Top Secret [[CA Top Secret interface#Preparing a TOPSPARM parameter module with TOPSGEN\|ACID]] in effect for the run (default <var>M204TOPS</var>).</td></tr>		<td>The Top Secret [[CA-Top Secret interface#Preparing a TOPSPARM parameter module with TOPSGEN\|ACID]] in effect for the run (default <var>M204TOPS</var>).</td></tr>
	</table></td></tr>		</table></td></tr>

Admin: 1 revision: SirSafe pages

2016-11-30T21:32:41Z

1 revision: SirSafe pages

← Older revision	Revision as of 21:32, 30 November 2016
(No difference)

JAL: reduce heading level for "Syntax"

2016-11-30T20:43:30Z

reduce heading level for "Syntax"

New page

The <var>$Sir_Check_Access</var> function allows installations to code sophisticated
interfaces between <var class="product">Model 204</var> applications and a [[Security interfaces overview|System Authorization Facility]] such as RACF or ACF2.
<var>$Sir_Check_Access</var> lets a system security administrator maintain controls over "data set names" that identify intended application actions.
By calling the function at strategic points, a <var class="product">SOUL</var> program can provide security with arbitrary granularity.

<p class="note"><b>Note:</b> Use of this function requires purchase of the <var class="product">[[SirSafe]]</var> add-on product. </p>

===Syntax===
<p class="syntax">%rc = $Sir_Check_Access(<span class="term">dsn, prefix, access, log</span>)
</p>

===Syntax terms===
<table>
<tr><th>%rc</th>
<td>A numeric [[#Return codes|return code]].</td></tr>

<tr><th>dsn</th>
<td>An uppercase "data set name," following the usual rules.
<p class="note"><b>Note:</b> If a prefix is provided, the prefix is concatenated to the beginning of <var class="term">dsn</var> with a separating period (<tt>.</tt>), and the resulting string length must be less than 44 characters. </p></td></tr>

<tr><th>prefix</th>
<td>A string indicating whether the provided data set name is to be prefixed. Valid values are:
<table class="thJustBold">
<tr><th>NONE</th>
<td>No prefix is to be provided (the default).</td></tr>

<tr><th>AUTH</th>
<td>The same HLQ (high-level qualifier) used by <var class="product">SirSafe</var>, determined by the external authorizer in use:
<table>
<tr><th>RACF</th>
<td>The RACF [[Security Server (formerly RACF) interface#Preparing a RACFPARM parameter module with RACFGEN|control group name]] in effect for the run (default <var>M204RACF</var>).</td></tr>

<tr><th>ACF2</th>
<td>The character "R" with the [[CA-ACF2 MVS interface#Preparing the ACF2PARM parameter module with ACF2GEN|ACF2 resource type]] appended (default <var>R204</var>).</td></tr>

<tr><th>TOPSECRET</th>
<td>The Top Secret [[CA Top Secret interface#Preparing a TOPSPARM parameter module with TOPSGEN|ACID]] in effect for the run (default <var>M204TOPS</var>).</td></tr>
</table></td></tr>

<tr><th>JOB</th>
<td>The current job name.</td></tr>

<tr><th>JOB.STEP</th>
<td>The current job name and step name separated by a period.</td></tr>

<tr><th>AUTH.JOB</th>
<td>The SirSafe HLQ and job name separated by a period.</td></tr>

<tr><th>CCASYS</th>
<td>The data set name for CCASYS.</td></tr>
</table></td></tr>

<tr><th>access</th>
<td>Flag indicating desired access: <code>R</code> for read, or <code>W</code> for write. The default is <code>R</code>.</td></tr>

<tr><th>log</th>
<td>Flag indicating whether failed access checks should be logged: <code>Y</code> or <code>N</code>. The default is <code>N</code>, which suppresses logging.</td></tr>
</table>

===Return codes===
<var>$Sir_Check_Access</var> returns an integer value, as follows:
<table class="thJustBold">
<tr><th>2</th>
<td>No authorizer running, call ignored</td></tr>

<tr><th>1</th>
<td>Access not allowed</td></tr>

<tr><th>0</th>
<td>Access allowed</td></tr>

<tr><th>-1</th>
<td>Resulting dsname (prefix.dsname) invalid</td></tr>

<tr><th>-2</th>
<td>Prefix argument invalid</td></tr>

<tr><th>-3</th>
<td>Read/write flag invalid</td></tr>

<tr><th>-4</th>
<td>Log/nolog flag invalid</td></tr>
</table>

Template:$Sir Check Access - Revision history

JAL: link repair

Admin: 1 revision: SirSafe pages

JAL: reduce heading level for "Syntax"