Previous Topic: Using Multiple Subsystem IDsNext Topic: Masking the SYSID


Sharing DB2 Records or CA ACF2 Option for DB2 Rules

To share a CA ACF2 Option for DB2 rule among multiple subsystems, mask the $SYSID control statement of the rule set in a way that groups the SYSIDs you want to control. You can use standard CA ACF2 Option for DB2 masking characters. (See the Masking the SYSID section for information about masking characters.) For example, you can create a rule set that permits everyone to execute all plan resources on any DB2 subsystem that begins with DB. This rule set appears as follows:

$KEY(********) TYPE(PLN) SYSID(DB**)
 UID(‑) SERVICE(EXECUTE) ALLOW

If the SYSID’s of the individual DB2 subsystems do not allow masking to be used for rule sharing, a group SYSID can be created to allow sharing of rules. A value can be assigned to the GSYSID field of the DB2 OPTS record. You can then create the rules using this value as the value of the $SYSID() field.

Note: If there is a value assigned to the GSYSID field in the DB2 OPTS record, this value is substituted for the DB2 SYSID field during resource validation. Any rules written using the DB2 SYSID will no longer be used.

See the the “Writing CA ACF2 Option for DB2 Rules,” chapter for more information about CA ACF2 Option for DB2 rule sets, the $SYSID control statement, and masking.

To share DB2 records among multiple subsystems, insert the DB2 record using a masked SYSID. For example, to consolidate the existing OPTS records for two DB2 subsystems (DB2A and DB2B), mask the SYSID in a way that groups the SYSIDs you want to control (for example, DB2*). Create a new DB2 OPTS record under this masked SYSID using one of the DB2 OPTS records as an example. Finally, delete the DB2 OPTS records for DB2A and DB2B using the standard ACF subcommand. These subcommands show how you can do this:

ACF
SET CONTROL(DB2) SYSID(DB2*)
INSERT OPTS USYSID(DB2A)
DELETE OPTS SYSID(DB2A)
DELETE OPTS SYSID(DB2B)
END

The section entitled Selecting the SYSID explains how to set the default SYSID for the session or for each ACF subcommand.