Using the ACF Command › ACF SET Subcommand

ACF SET Subcommand

After entering the ACF command, you must establish an ACF setting that tells CA ACF2 for VM what type of processing you want to do. Issue the ACF SET subcommand and an operand to establish the setting.

The SET subcommand determines the particular type of ACF record or rule set you can process through the ACF subcommands.

It also determines the type of display you see when you use the TRIVIA|NOTRIVIA (controls the fields displayed) and TERSE|VERBOSE (controls how much of a logonid record is displayed) operands. Through the MODE|NOMODE operands, the SET subcommand determines if certain ACF command responses appear as a question mark (?) or the name of the setting. Enter the SET subcommand with one of the following operands:

    { Acf                       }
    { applidclass(applidtype)   }
    { CMdlim                    }
    { Control(Vmo|ACFServe)     }
    { Diaglim                   }
    { Entry(type)               }
    { Force|NOForce             }
    { Lid                       }
SEt { MODE|NOMode               }
    { MODEL                     }
    { Resource(type)            }
    { Rule                      }
    { SCope(SCP)                }
    { SHift(SFT|ZON)            }
    { SYSid(sysid)              }
    { Terse|Verbose             }
    { TRivia|NOTrivia           }

When you issue the SET subcommand, you must use at least one of the above operands. When you enter the ACF command without entering the SET subcommand, the following default values are in effect: ACF, FORCE, MODE, VERBOSE, and TRIVIA.

For example, to establish the RULE setting to process access rule sets, enter:

acf
ACF
set rule
RULE

The system responds with RULE to tell you that you can use the RULE setting.

For some settings, you must be more specific about the type of CA ACF2 for VM record you want to process. For example, to process entry records, you must specify the setting and a three‑character type code:

acf
ACF
set entry(src)
ENTRY(SRC)

CA ACF2 for VM responds with ENTRY SRC, indicating that you can process source entry records.

All of the valid operands you can use with the ACF SET subcommand are described below.

Acf

The default setting. You are in this setting when you enter ACF. Use this setting to process logonid records and access rule sets. It is a combination of the LID and RULE settings, that are described below.

applidclass(applidtype)

Specifies that you will be updating structured infostorage records.
CA ACF2 for VM supports and uses the CONTROL(VMO) and CONTROL(ACFSERVE) settings. You can define additional applications through the VMO APPLDEF record.

Cmdlim

Specifies that you want to limit access to CP commands.

Control(Vmo|ACFServe)

Specifies that you will be processing VMO records or ACFSERVE privilege records. (You can also use SER as an abbreviation for ACFSERVE.)

Diaglim

Specifies that you want to limit the authority to issue diagnose instructions.

Entry(type)

Specifies that you want to process entry records. Entry records specify which terminal a user must use to access the system. The parameter code represents the type of entry record to be processed. Valid types of entry records include:

SRC

Indicates source entry records

SGP

Indicates source group entry record

usr

Indicates a site‑defined entry record.

Force|NOForce

Specifies if you want to force storing of the rule set on the database. During the STORE process, the FORCE setting (the default) replaces the rule set if it already existed on the database. The NOFORCE setting stores rules only if they did not exist on the database before.

Lid

Specifies that you want to process logonids.

MODE|NOMode

Sets how CA ACF2 for VM prompts you for input. The MODE setting (the default) prompts with the current record setting. For example, if you issued the SET RULE command, CA ACF2 for VM displays RULE every time you press Enter to remind you what setting you are in. The NOMODE setting issues a question mark (?) to indicate that CA ACF2 for VM is active and waiting for a command or response.

MODEL

Indicates that you want to process CP command syntax models.

Resource(type)

Specifies that you want to process resource rules. The type represents the resource type to process. CA ACF2 for VM‑supplied type codes are ACT, ALG, DIA, GRP, IUC, and VMC. You can also define your own resources to protect.

Rule

Specifies that you want to process access rule sets.

SCope(SCP)

Specifies that you want to define scope records. These records can limit the authority given to powerful users, such as security administrators.

SHift(SFT|ZON)

Specifies that you want to process SHIFT (SFT) and ZONE (ZON) records. These records define when a user can successfully access the system.

SYSid(sysid)

Sets the session default SYSID for the CONTROL(VMO) and CONTROL(ACFSERVE) settings.

Terse|Verbose

Using TERSE displays a condensed version of any CA ACF2 for VM record, for example, a logonid record or rule set. The fields of the @HEADER macro of the FDR determine the TERSE output. See the @HEADER macro description in the Installation Guide. The VERBOSE (default) setting displays the complete record.

The following examples illustrate the TERSE and VERBOSE operands of the SET subcommand.

Ann Smith's logonid is listed under the TERSE setting:

TLCAMS     TLCTNYTLCAMS ANN SMITH     EXT 321

The same logonid listed under the VERBOSE setting looks like this:

TLCAMS            TLCTNYTLCAMS ANN SMITH  EXT 321
PRIVILEGES        AUDIT
ACCESS            ACC‑CNT(223) ACC‑DAT(02/21/98)
                  ACC‑SRCE(GRAF‑247) ACC‑TIME(08:32)
PASSWORD          PSWD‑DAT(02/23/98) PSWD‑TOD(01/09/98‑07:34)
                  PSWD‑VIO(4)
STATISTICS        UPD‑TOD(03/19/97‑06:57)
RESTRICTIONS      PREFIX(TLCAMS)

TRivia|NOTrivia

TRIVIA (the default) displays all fields of a logonid record or structured infostorage record that a user is authorized to display. NOTRIVIA does not display those fields that have the LIMIT flag specified in the @CFDE macro.

The screen below shows Ann Smith's logonid listed under the NOTRIVIA setting:

TLCAMS           TLCTNYTLCAMS ANN SMITH EXT 321
PRIVILEGES       AUDIT
RESTRICTIONS     PREFIX(TLCAMS)

The same logonid listed under the TRIVIA setting looks like this:

TLCAMS           TLCTNYTLCAMS ANN SMITH EXT 321
PRIVILEGES       AUDIT
ACCESS           ACC‑CNT(223) ACC‑DAT(02/21/98)
                 ACC‑SRCE(GRAF‑247) ACC‑TIME(08:32)
PASSWORD         PSWD‑DAT(02/23/98) PSWD‑TOD(01/09/98‑07:34)
                 PSWD‑VIO(4)
STATISTICS       UPD‑TOD(03/19/98‑06:57)
RESTRICTIONS     PREFIX(TLCAMS)

Most of the remaining chapters in this guide explain how to use the ACF subcommands for processing the different kinds of CA ACF2 for VM records. The chart below can help you locate information contained in this guide and direct you to other guides, if necessary.