cics 资源访问控制

 

术语：

Transaction Definitions (TD) TSLCheck

Resource Security Level (RSL)

1、在UD中通过参数 RSLKeyList ： 值 举例如 3|5|7| 。

2、在资源文件定义中 参数 RSLKey

RSLKey 取值范围:

A key that is represented by a number (1 through 24 )：仅当能匹配到UD中通过参数RSLKeyList 中的值时可以访问

public： 任何人可以访问

private： 只有TD 定义中 参数RSLCheck 设置为none 可以访问。

RSLKey 作用的资源有：

• Files as defined in the File Definitions (FD)
• Transient data queues as defined in the Transient Data Definitions (TDD)
• Temporary storage queues as defined in the Temporary Storage Definitions (TSD)
• Journals as defined in the Journal Definitions (JD)
• Application programs as defined in the Program Definitions (PD)
• Transactions as defined in the Transaction Definitions (TD)

3、在TD文件中 参数RSLCheck。

取值范围：

external ：外部检查。 此时 RSLKey 不起作用

internal ： 例如： CECI, CPMI, CEDF, CEBR, CSM1 and CSMI。如果你想交易执行安全检查，就必须设置为此值。

none ：不做检查。

例子：

RSL key value	RSLCheck=none (no checking)	RSLCheck=internal (checking)
RSLKey=private	Access allowed	Access refused
RSLKey=public	Access allowed	Access allowed
RSLKey=1-24	Access allowed	Access allowed (if keys match)

 

4、当用户访问非授权的资源时，会抛出NOTAUTH 异常。（If a user tries to access a resource and the resource security key does not match, a NOTAUTH condition is raised.）