Writing Rules › Use of NEXTKEY in Resource Rules › Merging Rule Sets

Merging Rule Sets

The following sample rule sets show how to use NEXTKEY to merge multiple rule sets. The first four rule sets describe an access environment for resources named TEST01, TEST02, TEST03, and TEST25 (assume rules for TEST04 through TEST24 also exist):

$KEY(test01)
 UID(tfinpaynlt) NEXTKEY(testxx)

$KEY(test02)
 UID(tfinpaynlt) NEXTKEY(testxx)

$KEY(test03)
 UID(tfinpaynlt) NEXTKEY(testxx)

$KEY(test25)
 NEXTKEY(testxx)

Although none of these rule sets allow access to users whose UIDs match the TFINPAYNLT mask, you can create a rule set that gives access to all of the previous resources even though the resources have different names. Use the NEXTKEY parameter to direct CA ACF2 Option for DB2 evaluation to a single resource rule, TESTXX. Write the rule set for this as follows:

$KEY(testxx) TYPE(xxx)
 UID(tfinpaynlt) ALLOW