The ACFNRULE command adds individual rule entries to access rule sets. The changed rule is automatically compiled, sorted, and stored. ACFNRULE also processes resource rules.
The syntax for the ACFNRULE command is:
ACFNRULE {ruleid } [TYPE(rsrctype)]
{KEY(ruleid)} }
{[ADD(ruleentry)]|[DELETE(ruleentry)]}
[List|NOList ]
[Verify|NOVerify ]
The operands for ACFNRULE are defined below.
Indicates the $KEY value. To process a single rule set, specify the $KEY of the rule. Both ruleid and KEY(ruleid) function alike. You must issue this operand.
Processes resource rules. The rsrctype value must be the three‑character resource type code where the resource rule is stored. You cannot mask this value. This operand is optional and you must omit it when processing access rules.
Inserts one or more individual rule entries into a rule set. For example, ADD(V0191.volume uid(TEST-)) inserts one rule entry into a rule set. You can ADD and DELETE (see description below) rule entries in a single command. You must specify at least one of these functions.
Removes one or more individual rule entries from a rule set. For example, DELETE(V0191.volume uid(TEST-) deletes one rule entry from a rule set. You can DELETE and ADD (see description above) rule entries in a single command. You must specify at least one of these functions.
LIST displays the rule set at the terminal. NOLIST suppresses the display. The default is LIST.
These operands are valid only when you use the DELETE function. VERIFY displays each rule entry you are deleting, followed by a verification request. You must respond Y to delete the rule entry or N to suppress the delete. VERIFY is the default. NOVERIFY deletes rule entries without user verification.
The next section contains examples of how to use ACFNRULE to add individual rule entries from an access rule set or a resource rule set.
To add a rule entry to an existing rule set, specify the rule ID of the rule and the new rule entry. For example:
ACFNRULE TLCAMS ADD(V0191.‑ UID(SHS‑) READ(A)) ACFCMP510I ACF compiler entered $KEY(TLCAMS) V0191.JD‑ UID(*) V0191.VOLUME UID(*) READ(A) WRITE(A) EXEC(A) V0191.‑ READ(A) WRITE(A) EXEC(A) V0192.‑ UID(*) READ(A) EXEC(A) ‑ UID(****TLC) READ(A) EXEC(A) *. ACFDCM551I Total record length=205 bytes ‑ 5 percent utilized V0191.‑ UID(SHS‑) READ(A) .dc cont › ACFCMP550W Execute access set to same value as read access in one› or more rules ACFCMP551I Total record length=229 bytes ‑ 5 percent utilized ACFULE727I Rule TLCAMS stored Ready; T=0.04/0.18 12:55:01
In this example, a single new rule entry is added to the TLCAMS rule set. The default parameter of LIST displayed the updated rule set at the terminal.
You can add more than one rule entry to the rule set.
ACFNRULE TLCAMS ADD(V0192.‑ UID(SHS‑)) ADD(V0193.VOLUME UID(*)) NOLIST ACFCMP510I ACF compiler entered ACFCMP551I Total record length=273 bytes ‑ 6 percent utilized ACFULE727I Rule TLCAMS stored Ready; T=0.04/0.16 12:57:17
Two new rule entries were added to the TLCAMS rule set. The updated rule set is not displayed at the terminal because you specified the NOLIST parameter.
You can also use ACFNRULE to add resource rule entries. To process resource rules, include the three‑character resource rule type after the rule ID. For example:
ACFNRULE ACF2 TYPE(CKC) ADD(UID(*) ALLOW) ACFCMP510I ACF compiler entered $KEY(ACF2) TYPE(CKC) UID(*****TLCAMS) VERIFY ALLOW UID(*****PAY) ALLOW *. ACFDCM551I Total record length=176 bytes ‑ 4 percent utilized UID(*) ALLOW ACFCMP551I Total record length=192 bytes ‑ 4 percent utilized ACFULE729I Resource CKCACF2 A stored Ready; T=0.03/0.16 13:02:30
One entry is added to the resource rule stored under the type code CKC.
|
Copyright © 2009 CA Technologies.
All rights reserved.
|
|