You can test CA ACF2 Option for DB2 rules against a user's logonid or UID using the ISPF panels. This option tests the rule set stored in the Infostorage database against the criteria that you supply in this option. These criteria simulate the environment that might exist when CA ACF2 Option for DB2 validates the actual request. CA ACF2 Option for DB2 also considers values specified for the DB2 OPTS record when a rule denies access. Testing does not account for any user‑specific system options, user‑developed exits, attributes of the logonid, or other DB2 privileges that might grant a user access (such as SYSADM or DBADM). The actual rule set that CA ACF2 Option for DB2 uses to validate access to a resource is used in the test.
This facility can test the type of access that CA ACF2 Option for DB2 allows to a resource. It also helps determine whether a violation will occur before actually incurring it.
The CA ACF2 Rule Test Facility panel combines the functions provided by the TEST and DECOMP subcommands.
|
Copyright © 2011 CA Technologies.
All rights reserved.
|
|