Infostorage records contain information about the system, including CA ACF2 system options and CA ACF2 Option for DB2 security information. CA ACF2 Option for DB2 records contain information about the DB2 subsystem and CA ACF2 Option for DB2 resources. A set of CA ACF2 Option for DB2 rules are also records that tell CA ACF2 Option for DB2 whether to permit a user access to a DB2 resource and under what conditions. In this guide, we refer to CA ACF2 Option for DB2 non‑rule records as DB2 records and a set of rules as CA ACF2 Option for DB2 rules.
The first 44 characters of an infostorage record are called the key. CA ACF2 Option for DB2 uses the key to identify the record. CA ACF2 Option for DB2 infostorage record keys are made up of a class code, a type code, a DB2 subsystem ID, and the record name, as follows:
ctttssssname
The first character c is the class code. DB2 records are in class C (for CONTROL). CA ACF2 Option for DB2 rules are in class D (for DB2). The second through fourth characters (ttt) are the type code. The type code corresponds to the type of record. For DB2 records (class C), the type code is DB2. For CA ACF2 Option for DB2 rules (class D), the type code represents the type of resource (TBL for tables, DBS for databases, and so on). The fifth through eighth characters (ssss) are the DB2 subsystem ID, or SYSID. This ID specifies the DB2 subsystem that uses this record. The DB2 subsystem is defined in the IEFSSNxx member of SYS1.PARMLIB.
The remaining characters in the key (name) represent the record name. For DB2 records, the record name is EXITS, OPTS, or SAFELIST.qualifier. Since each DB2 subsystem can have multiple SAFELIST records, the qualifier on the SAFELIST record makes each record key unique. For CA ACF2 Option for DB2 rules, the record name is the resource name or the $KEY. For example, the infostorage record key for a DB2 record might look like this:
CDB2PRODEXITS
The infostorage record key for a CA ACF2 Option for DB2 rule might look like this:
DSYSPRODSYSADM
This section explains:
|
Copyright © 2011 CA Technologies.
All rights reserved.
|
|