Previous Topic: Access EnvironmentsNext Topic: Operand Masking Techniques


Access Permissions

A rule entry contains one parameter that specifies the action CA ACF2 for z/ VM takes when an access environment matches the environment defined in a rule entry. If your request to execute a CP command does not match any of the environments specified in the related rule entries, the execution is usually denied, depending on the value specified for the SYNERR field. For more information about this field, see the “Controlling Syntax Error Processing for Command Limiting” chapter. The possible access permission values are:

ALLOW

Specifies execution is allowed if the execution attempt matches the environment.

LOG

Specifies execution is allowed but logged if the execution attempt matches the environment. A System Management Facility (SMF) record is written to log the event for later reporting on the Command Limiting Journal (ACFRPTCL).

PREVENT

Specifies execution is denied if the execution attempt matches the environment. A System Management Facility (SMF) record is written to log the event for later reporting on the Command Limiting Journal (ACFRPTCL).

If you do not specify ALLOW or LOG, CA ACF2 for z/ VM assumes PREVENT.