ACF2

 View Only
  • 1.  UID(*) what does it mean for a resource

    Posted 19 days ago

    For a Mainframe Resource if I see this as the Universal Access 
    UID(*) LOG what is the actual Access that is allowing is there a way to display the specific access that is being logged ?
    Is there a command that specifically displays the Default access that UID(*) has ?



  • 2.  RE: UID(*) what does it mean for a resource

    Posted 13 days ago

    UID(*) LOG

    That means that all users have no access to that given resource, and they will log any attempts to access it.




  • 3.  RE: UID(*) what does it mean for a resource

    Posted 12 days ago

    Resource Rule Entries

    Broadcom remove preview
    Resource Rule Entries
    Individual resource rule entries follow the control statements in a rule set. Each rule entry specifies an environment and access permission under which access to a particular resource can take place. When an access attempt is made, matches the environment of the access attempt against the environment specified in the resource rule.
    View this on Broadcom >


    Log means it will allow access but log it. 

    Refer to the above link for more info.



    ------------------------------
    Ernest Gorski
    ------------------------------



  • 4.  RE: UID(*) what does it mean for a resource

    Broadcom Employee
    Posted 12 days ago
    Dan, as you mentioned UID(*) log means universal access allowed, but all the access will be logged.

    You can run ACFRPTRV report with DETAIL option pointing to SMF active at the time when access was made and it will print all the log entries showing the actual access. 

    //SYSIN    DD *                                    

    TITLE(ACFRPTRV)

    DETAIL

    /*

     
    UID(*) LOG means all logonids have access to a resource for SERVICE READ, UPDATE, DELETE and ADD.
     
    You can also use the test command to see if the access to this resource would be given or not:
     
    test * 
     
    RSRCNAME('resource,name') LID(logonid) SERVICE(read)    
     
    ACCESS subcommand comes in handy as well to see what access will be allowed to a particular dataset or resource. 
     
    Please let me know if this answers your question or you were looking for some other information?
     
    Thanks.

    Jasdeep