Maintaining Access Rules with the ACF Command › Access Rule Components › Access Rule Entries › Access Rules for Shared File System Files › Writing Access Rules for Remote Users

Writing Access Rules for Remote Users

You can configure SFS filepools to let users on remote nodes transparently read and write files on the local node. At this time, we can only determine if an access is local or remote. We cannot determine the precise APPC node of origin for a remote user.

To provide some control for remote and local user file access, you should use CA ACF2 for VM source validation in access rules. Remote SFS users will always have a terminal ID named SFSREMOT. Local SFS users will have their true terminal ID on the local system

The following rule set provides an example that would give user ID TLCRAM write access to the PAYROLL DATA file in TLCAMS's root directory when TLCRAM is accessing the data locally, but only permits read access when TLCRAM tries to access the data from a remote system.

$KEY(TLCAMS)
 / FPOOL(APPLDATA) UID(TLCRAM) SOURCE(SFSREMOT) READ(A)
 / FPOOL(APPLDATA) UID(TLCRAM) READ(A) WRITE(A)
 PAYROLL.DATA FPOOL(APPLDATA) UID(TLCRAM) SOURCE(SFSREMOT) READ(A)
 PAYROLL.DATA FPOOL(APPLDATA) UID(TLCRAM) READ(A) WRITE(A)