Maintaining Access Rules with the ACF Command › Access Rule Components › Access Rule Entries › Access Rules for Shared File System Files › Writing Access Rules for SFS Directories

Writing Access Rules for SFS Directories

To access a file in an SFS directory, you need the proper authorization to access the relevant directory. You need to write a directory access rule as part of your rule set. The SFS directory access rule is required to access files and to issue the CMS ACCESS command for the directory.

For example, if TLCPJM tries to access TLCAMS' directory called UNITEDSTATES.ILLINOIS.CHICAGO that resides in the APPLDATA filepool, he must issue the following command:

ACCESS APPLDATA:TLCAMS.UNITEDSTATES.ILLINOIS.CHICAGO E

Because TLCPJM does not own this directory, the action defaults to access this directory in read only mode. To allow access, the following read access rule is required:

$KEY(TLCAMS)
 / FILEPOOL(APPLDATA) DIR(UNITEDSTATES.ILLINOIS.CHICAGO)UID(TLCPJM) READ(A)

Even though some CMS commands (such as RENAME) can directly address SFS files without use the CMS ACCESS command to first access it, you still need the directory access rule because implied access is in effect for the duration of the file access. You can use standard CA ACF2 for VM masking characters for the filepool (abbreviated FP) and the directory values.

User ID TLCPJM can explicitly request access to this directory in write mode as follows:

ACCESS APPLDATA:TLCAMS.UNITEDSTATES.ILLINOIS.CHICAGO E (FORCERW

There are two types of control directories, the File Control directory and the Directory Control (DIRCONTROL) directory. For the File Control directory, the most common type, the above access command would work even if the user only has read authority for the directory.

However, for the DIRCONTROL directory, the user needs both read and write access permission in the rule to authorize access. For example:

$KEY(TLCAMS)
 / FILEPOOL(APPLDATA) DIR(UNITEDSTATES.ILLINOIS.CHICAGO) UID(TLCPJM) -
 READ(A) WRITE(A)

Because SFS directories accessed in write mode can also be read, you must always specify READ(A) when you specify WRITE(A) for SFS access rules.