Previous Topic: Logonid Access Report SectionNext Topic: Understanding the ACFRPTXR Report


What Do the Fields Mean?

The fields shown in the logonid access report are explained in terms of CA ACF2 Option for DB2 information.

$KEY

Names the DB2 resource that this CA ACF2 Option for DB2 rule applies to.

TYPE

Identifies the type of resource.

SYSID

Specifies the subsystem ID (SYSID) of the DB2 subsystem that this rule set applies to.

STORED

Specifies the date and time the rule set was last stored. The format of this field depends on the DATE option of the GSO OPTS record.

BY

Names the logonid of the user who last stored the rule set.

$UIDOWNER

Shows the UID‑mask of the users who own this resource. When the user’s UID matches this mask, the following message appears:

*** USER HAS ACCESS TO DB2 RESOURCE AS OWNER

$LIDOWNER

Lists the logonid of the user who owns this resource. When the user’s logonid matches this value, the following message appears:

*** USER HAS ACCESS TO DB2 RESOURCE AS OWNER

%CHANGE

Identifies the UID‑mask of the users who can change the control statements and rule entries. These users can delegate this authority to other users. This field appears only when the user’s UID matches the value of the %CHANGE control statement. The following message is displayed:

**** USER CAN CHANGE RULE

%RCHANGE

The UID‑mask of the users who can change the rule entries. This authority cannot be delegated. This field appears only when the user’s UID matches the value of the %RCHANGE control statement. The following message is displayed:

*** USER CAN CHANGE ANY OF THE RULE ENTRIES

rule entry

Lists each rule entry that applies to the logonid or UID being processed. Possible fields that could appear in an CA ACF2 Option for DB2 rule entry are as follows:

UID(uidmask)
SHIFT(shift)
SERVICE(keyword1,keyword2,...,keywordn)
COLUMN(column1,column2,...,columnn)
ACTIVE(date)
UNTIL(date)
FOR(date)
DATA(text)
ALLOW|LOG|PREVENT
NEXTKEY(nextkey)