Learn how to submit posts to the communities and about the different types of posts.
I would suggest finer control of CASECAUT(TSSCMD.ADMIN.MODIFY) in CA-TOP SECRET, so that (for instance) an administrator might give an operations shift supervisor the capability to restart CA-Top Secret with
TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY.TEMPSHUT) ACC(PRIVILEG)
would provide the shift supervisor the capability to respectively perform a temporary shutdown, and end-of-day shutdown. or a cancel of the Top Secret address space, depending on the extended qualifier. This would allow the administrator to more finely tune the permission of limited administration to console operators, without giving the equivalent of full CONSOLE privileges.
Other specific control options might also be included, so as to protect certain control options from less sophisticated users: e.g.
TSS PER(acid) CASECAUT(TSSCMD.ADMIN.MODIFY.ADMINBY) ACC(PRIVILEG)
Good morning, Benjamin.
I think you may have posted this comment on the wrong post. Given that it's about CA Top Secret, I'd invite you to come over to the CA Mainframe Security community to post this as an idea.
Retrieving data ...