I am setting up security for a number of users, should I use modeling?

Document ID : KB000027018
Last Modified Date : 14/02/2018
Show Technical Document Details

Question:

I am setting up security for a number of users, should I use modeling?

Answer:

If you are planning on having a number of users that will need the same levels of security, it is best to use modeling. If there is a change in the level of security that is needed for a group of users, you will only have to change any user associated with the MODEL ID.

For example:

You can define a MODEL ID called ADMIN. This id will have full access to define, delete, and edit any catalog. You can have another MODEL ID called PROG. This group can edit but not delete or define. Finally another ID called OPER; this group may only be allowed to browse.

Sample MODEL ID definition for ADMIN - full access.

From the Mastercat Main Menu

Select S Secure CA-MASTERCAT online. Followed by

A Function Security

Press PF4 to add a new user fill in the userid and put a Y in all fields.

             ... USER ===> ADMIN___ ... MODEL ===> ________            ... 
ACCESS ALLOWED?           JOB GEN ALLOWED?         IDCAMS CMD ALLOWED? ... 
EPIC        ===> Y        IDCAMS        ===> Y     ALTER        ===> Y ... 
EXTEND/DASD ===> Y        GSPDSU        ===> Y     DELETE       ===> Y ... 
FAQS/PCS    ===> Y                                 UCAT DEFINE  ===> Y ... 
FAVER2      ===> Y                                 CL DEFINE    ===> Y ... 
FLEE        ===> Y        FUNCTION ALLOWED?        SPACE DEFINE ===> Y ... 
HYPER-BUF   ===> Y        Object search ===> Y     PATH DEFINE  ===> Y ... 
MASTERCAT   ===> Y        File browse   ===> Y     Build AIX    ===> Y ... 
MSHP        ===> Y        File edit     ===> Y                         ... 
Security    ===> Y        File delete   ===> Y                         ... 
ExpDelivery ===> Y        CNTLNM update ===> Y                         ... 
VSAMAID     ===> Y        Close ACB     ===> Y        ... 

Press PF4 to save the ID.

To MODEL an ID after the ADMIN model, press PF4 from the Function Security main screen. Enter the USERID and MODELID and press pf4 to save the ID.

Enter the new User ID and ACCESS options.

                   ... USER ===> abcde ___ ... MODEL ===> admin ___ ... 
----------------------------------------------------------------------------- 

Sample MODEL ID definition for OPER - limited access.

Press PF4 to add a new user fill in the userid. Put a Y or N in each field.

             ... USER ===> OPER___ ... MODEL ===> ________            ... 
ACCESS ALLOWED?         JOB GEN ALLOWED?          IDCAMS CMD ALLOWED? ... 
EPIC        ===> Y      IDCAMS        ===> N      ALTER       ===> N  ... 
EXTEND/DASD ===> Y      GSPDSU        ===> N      DELETE      ===> N  ... 
FAQS/PCS    ===> Y                                UCAT DEFINE ===> N  ... 
FAVER2      ===> Y                                CL DEFINE   ===> N  ... 
FLEE        ===> Y      FUNCTION ALLOWED?         SPACE DEFINE===> N  ... 
HYPER-BUF   ===> Y      Object search ===> Y      PATH DEFINE ===> N  ... 
MASTERCAT   ===> Y      File browse   ===> Y      Build AIX   ===> N  ... 
MSHP        ===> Y      File edit     ===> N                          ... 
Security    ===> N      File delete   ===> N                          ... 
ExpDelivery ===> Y      CNTLNM update ===> N                          ... 
VSAMAID     ===> Y      Close ACB     ===> N 

Press PF4 to save the ID.