How to write access rule in CA-ACF2

Shakila · New User Joined: 16 Jan 2007 Posts: 11 Location: Noida

How to write access rule such that nobody or only few peoples can access the particular dataset in ACF2?

dick scherrer · Posted: Fri Jul 13, 2007 10:18 pm

Hello,

If you talk with your security people and describe what you want, they will be able to establish the rule(s) or show you how to do it (if you have the required permission to do so - some places allow this, some do not).

Shakila · New User Joined: 16 Jan 2007 Posts: 11 Location: Noida

Hi,

Rightnow i am doing an audit for that i have auditor access so i am able to do the work and i am also changing the rules through batch job.

My need is to write access rule such that nobody or only few peoples can access the particular dataset through batch program using ACFBATCH utility etc.,

For Example :

This job will show RUNNING eTrust CA-ACF2, user authority, dataset protected volume, volser protected volume, automatic erase volume etc.,

//ACFBATCH JOB (ACCOUNT),'CSC INTERNAL UK',REGION=5M,
// TIME=15,MSGCLASS=X,NOTIFY=&SYSUID

//STEP1 EXEC PGM=ACFBATCH
//SYSHELP DD DSN=SYS1.HELP,DISP=SHR
//SYSPRINT DD SYSOUT=*
//SYSIN DD *
SET LID
LIST *******
SHOW STATE
/*

I hope now you can understand my need.

Thank you for your response.

Looking forward for your reply.

Thanks in Advance.

dick scherrer · Posted: Tue Jul 17, 2007 6:31 pm

Hello,

Yes, i believe we understand your requirement.

The way to get what you need is the way i posted previously - talk with the system security people and they can provide what you need to do for what you want on that system. You will need to provide them with the list of people who may access the dataset(s) and what access level they should be granted. It is possible that once they show you the new rujles, you can add new ones or modify the ones created at your request.

If you make a mistake doing this on your own, you may "open" things that should not be opened or prevent existing real work from being done because you "locked" something.

Said a different way - the system admin should be involved with this type of change.

It may be that i've misunderstood and if so please clarify.