Maintaining Access Rules with the ACF Command › Using ACF DECOMP to Display Access Rules

Using ACF DECOMP to Display Access Rules

Use the DECOMP subcommand to display access rules stored on the Rule database. You can list a rule set on a terminal or in a CMS file. To DECOMP rules belonging to other users, you must have at least the AUDIT privilege. You can set this privilege in the RULEOPTS VMO record. Contact your system administrator for more information about the CA ACF2 for VM privilege levels. The syntax for the DECOMP command is:

        { *              }
 DEComp { ruleid         } [INTO(fn)]
        { LIKE(rulemask) }

*

Specifies that CA ACF2 for VM displays the last rule you referenced.

ruleid

Identifies a specific rule ID ($KEY) to display.

LIKE(rulemask)

Lists multiple rules at one time. All rules that match the rulemask are decompiled and displayed.

INTO(fn)

Puts decompiled rule sets into a file named fn (filename) on your A‑disk. The filetype is always RULE. If rule sets exist in the file, CA ACF2 for VM adds the newly decompiled rules to the end of the file.

After you have built the rule, you can display it just as CA ACF2 for VM sees it. That is, in the exact order of their CA ACF2 for VM selection (from most specific to most general). The DECOMP subcommand displays your rules this way.

It is a good idea to use a file to build rules. If you had compiled (saved) your rule directly and then found an error, you would have to start at the beginning and enter the entire rule set again. If that rule set is in a file, edit the file and recompile the rule.