Defining Structured Infostorage Records › CLASMAP Record-SAF Resource Classes

CLASMAP Record-SAF Resource Classes

The CLASMAP record translates eight‑character resource classes into three‑byte CA ACF2 for VM resource type codes. The three‑character resource type code allows you to write resource rules to validate security calls for the specified classes. CA ACF2 for VM checks the CLASMAP record for this type code for all SAF calls.

Fields

RESOURCE(class)

Specifies the explicit eight‑character resource class from the CLASS keyword on the RACROUTE macro. Normal CA ACF2 for VM resource name masking conventions apply.

RSRCTYPE(typecode)

Specifies the explicit three‑character resource type code associated with the class. If you define a RESOURCE but do not define a RSRCTYPE, CA ACF2 for VM uses the first three characters of the RESOURCE as the RSRCTYPE. Use this type code to write resource rules to perform validation. This value cannot be a mask. If you want to mask the name of the resource in your resource rule key, add this type code to the VMO RESTYPE record and perform a rebuild. For more details, see the “About Resource Rules” chapter.

MUSID(musassid|********)

Identifies the MUSASS to which the CLASMAP record applies. This lets several MUSASSes that share the same resource class use a different type code. Normal CA ACF2 for VM resource name masking conventions apply.

ENTITYLN(0|entitylength)

Specifies the entity length of the specified SAF class. The default is 0. Zero causes CA ACF2 for VM to search its internal CLASMAP definitions; non‑zero causes the VMO CLASMAP to be used. The resultant CLASMAP record, VMO or internal, is used for both RSRCTYPE and ENTITYLN. If the resultant ENTITYLN is zero, CA ACF2 for VM assigns a length of 39, the IBM default.