RACF RESTRICTED Attribute equivalent under CA Top Secret

Document ID : KB000013101
Last Modified Date : 14/02/2018
Show Technical Document Details
Question:

What is the equivalent in CA Top Secret for the RACF RESTRICTED attribute?

 

Answer:

In RACF, these function means that only what is permitted directly to the user is assumed to control access, without searching rules anywhere, like in the 'ALL' record with TSS.

TSS does NOT have an attribute that would prevent that the ALL record would be searched if no match is found in the user's acid or connected profile(s). If you want to override a permit in the ALL record you must give an explicit matching permit to the user with e.g. ACCESS(NONE).