Resource Classes for ESMAC and Operator Command Security

ES Class name

Relation

Entities

ACCESS LEVEL

OPERCMDS

Class for operator commands used by casstart/casstop/casfile/cassub/casout... commands

ES Commands

Alter

MFESMAC

ESMAC Class for controlling access to ESMAC Resources

An attempt has been made to match the "Entities" listed below with the individual flags that are available for each user as defined in the old CICS Resource definition.  For each "flag" there are three states:  None, Read, Update.

TABLE - This is the equivalent of the "Master" flag within the CICS RDT file.    If your user has "Update" access to this resource then they will have the ability to interact with the majority of ESMAC function.   Primary items controlled by this setting are the appearance of the buttons for controlling the SEPS (Tracing, Stopping), Stopping the Server, Accessing the console.log, trace data, dump data, and the list of currently active ACEE's.   If a user has "None" then they will not be shown any buttons other than the Server Status Button and the Monitoring button in addition to the "Chg User" button which allows them to sign-on.  The basic effect of no access to this resource is that they are treated in the same way as an unauthenticated user.  If they have "Read" access they will be shown the options but will be unable to perform any updates.   If they have "Update" access or greater than they have full control of these functions.

GRP - This resource controls access to the buttons under the "Resources" drop down when the "By Group" selection is utilized.  If the user has "Update" access to this resource then they will be able to access all the buttons that appear under the "Resources" pulldown when the "By Group" selection is made.

IMS - This controls access to the buttons under the "Resources" drop down when the "IMS" selection is utilized.  See notes on "GRP" for details on the access rights.

JCL - This controls access to the buttons under the "Resources" drop down when the "JES" selection is utilized.  See notes on "GRP" for details on the access rights.

DCT, FCT, ICE,  JCT, MPR, PCT, PLT, PPT, SYS6, SYSC, TCT, TERM, TST, TTYPE, XAT, XLT- This controls the access a user has to the various resources (e.g. DCT, PCT, FCT) when selected via the "By Type" or "Active" menus under the Resources pulldown.   "None" indicates that they can do nothing with this resource type, "Read" indicates that they can see the current settings, and "Update" indicates that they can modify the entries of this type.

For example, if a user has READ access to PCT*, he or she will have the ability to view any PCTs defined to the system, but will not be able to update the entries. If the user has "Update" access then he or she can change and even install new ones. (assuming appropriate CINS authority)

   The resources listed above also control access to specific pages.  If for instance a page is primarily the DCT details for a DCT entry then attempting to access this page with no authority will result in your being driven to a "Sign-on" screen.

DCT, FCT, GRP, ICE, IMS, JCL, JCT, MPR, PCT, PLT, PPT, SIT, SNT, SUP, SYS6, SYSC, TABLE, TCT, TERM, TST, TTYPE, XAT, XLT

None, Read, Update