Masking the SYSID

Defining DB2 Records › SYSID Use in CA ACF2 Option for DB2 › Masking the SYSID

Masking the SYSID

If you use multiple SYSIDs to secure your subsystems, you can use masking characters to create one DB2 record or CA ACF2 Option for DB2 rule that covers many subsystems. Or you can mask the SYSID using the MSYSID parameter to process more than one DB2 record or CA ACF2 Option for DB2 rule at a time. The standard CA ACF2 masking characters are described below. You can use these characters with the SET, LIST, DECOMP, INSERT, CHANGE, and DELETE subcommands.

Masking Characters	Description
*	Use an asterisk in a SYSID of a single DB2 record or CA ACF2 Option for DB2 rule set to represent multiple DB2 subsystems. Or process more than one DB2 record or CA ACF2 Option for DB2 rule at a time using asterisks with the MSYSID parameter in an ACF subcommand. An asterisk represents a single character at any position in a mask.
–	Use a dash to process multiple DB2 records or CA ACF2 Option for DB2 rules. Do not use it to create a SYSID for a DB2 record that represents multiple DB2 records. For example, you cannot create a SYSID of DB– to represent DB2 subsystems with SYSIDs beginning with DB. To do this, use asterisks instead. You can use the dash, however, with the MSYSID parameter to process multiple records (see below). The dash represents zero or more characters at the end of a mask. CA ACF2 Option for DB2 processes any records with a key that matches the prefix specified before the dash. Do not insert a dash between characters in a mask. You can also use a dash as a standalone character to indicate that you want to process all records.

Masking Characters

Description

Use an asterisk in a SYSID of a single DB2 record or CA ACF2 Option for DB2 rule set to represent multiple DB2 subsystems. Or process more than one DB2 record or CA ACF2 Option for DB2 rule at a time using asterisks with the MSYSID parameter in an ACF subcommand. An asterisk represents a single character at any position in a mask.

–

Use a dash to process multiple DB2 records or CA ACF2 Option for DB2 rules. Do not use it to create a SYSID for a DB2 record that represents multiple DB2 records. For example, you cannot create a SYSID of DB– to represent DB2 subsystems with SYSIDs beginning with DB. To do this, use asterisks instead. You can use the dash, however, with the MSYSID parameter to process multiple records (see below). The dash represents zero or more characters at the end of a mask. CA ACF2 Option for DB2 processes any records with a key that matches the prefix specified before the dash. Do not insert a dash between characters in a mask. You can also use a dash as a standalone character to indicate that you want to process all records.

MSYSID is similar to SYSID, but indicates the use of SYSID masking and lets you process multiple DB2 records or CA ACF2 Option for DB2 rules at a time. The example below shows how the MSYSID parameter of the CHANGE subcommand applies the change to the DB2 OPTS records for all SYSIDs that begin with DB2, even though the SYSID is originally set to DB2P.

ACF
SET CONTROL(DB2) SYSID(DB2P)
CHANGE OPTS MSYSID(DB2*) TBLMODE(LOG) REP
END

The next example shows how to use the MSYSID parameter to list all CA ACF2 Option for DB2 table rules with a resource name ($KEY) of SYSIBM– regardless of which DB2 subsystem they cover:

ACF
SET DB2(TBL)
LIST LIKE(SYSIBM‑) MSYSID(‑)