Maintaining Access Rules with the ACF Command › Access Rule Components › Access Rule Entries › Access Rules for CMS Files

Access Rules for CMS Files

In CMS file access rules, CA ACF2 for VM constructs a pseudo dsn. The dsn includes the virtual address of the minidisk (preceded by a V), followed by a period, followed by the filetype. Specify the VM user ID of the minidisk owner in the $KEY or $PREFIX control statements. The syntax of a CMS file access rule is:

                         {UID(uid)                }
                         {UNTIL(date)|FOR(days)   }
 Vcccu.filename.filetype {READ(A|L|P)             }
                         {WRITE(A|L|P)            }
                         {EXEC(A|L|P)             }

The parameters for this access rule are defined below:

Vcccu

Specifies the virtual address of the minidisk

Filename

Specifies the CMS filename

Filetype

Specifies the CMS filetype

UID(uid)

Indicates a pattern specifying the users this rule applies to

UNTIL(date)

Specifies the date that the rule becomes invalid

FOR(days)

Defines how many days the rule is in effect

READ A|L|P, WRITE A|L|P, EXEC A|L|P

Defines precisely when and how this user can access this minidisk.

For example, TLCAMS has allowed links to her 0191 minidisk through the minidisk rule shown in the previous example. To allow access to a particular COBOL file on that minidisk, she must write an additional rule. The following example illustrates this:

$KEY(TLCAMS)
 V0191.VOLUME UID(APP‑) FOR(7) READ(A)
 V0191.MYFILE.COBOL UID(APP‑) FOR(7) READ(A)

Now all users whose UIDs match the mask APP- have READ and EXEC access to the CMS file MYFILE.COBOL TLCAMS owns residing on minidisk 0191.

What if TLCAMS wants to let one particular applications programmer (TLCPJM) write (or update) the COBOL file? She must write an additional minidisk rule entry to allow this more specific access. The following CMS file rule is also needed:

$KEY(TLCAMS)
 V0191.VOLUME UID(APP‑) FOR(7) READ(A)
 V0191.MYFILE.COBOL UID(APP‑) FOR(7) READ(A)
 V0191.VOLUME UID(APPTLCPJM) FOR(7) READ(A) WRITE(A)
 V0191.MYFILE.COBOL UID(APPTLCPJM) FOR(7) READ(A) WRITE(A)