Previous Topic: X-ROL Field DescriptionsNext Topic: How CA ACF2 Processes Requests for Access


How CA ACF2 Sorts X-ROL Records

When you specify the EXCLUDE field, CA ACF2 performs sort processing from the most specific to the most general. The most specific entry is always chosen as the valid entry, because it is matched first.

Therefore, if you specify LV1*5 in the INCLUDE field, and LV105 in the EXCLUDE field, LV105 is excluded, even though it matches the masked field, because LV105 is more specific. More importantly, the EXCLUDE entry can override the INCLUDE entry. Also, by default, if the INCLUDE field and the EXCLUDE field have the same entry, the entry is excluded from the group.