Converting to Full Security › Selective Migration › Using NEXTKEY for Access Rules

Using NEXTKEY for Access Rules

The NEXTKEY feature lets you split an access rule set into several smaller rule sets. Each could specify its own $MODE. For example:

$KEY(TLCAMS)
$MODE(LOG)
 V0191.VOLUME R(A) W(A)
 V0191.PROD.MASTER UID(TLCPJM) R(A) W(A) E(A)
 V0191.PROD.TEST UID(*) NEXTKEY(TEST)
 
$KEY(TEST)
$PREFIX(TLCAMS.V0191)
$MODE(ABORT)
 PROD.TEST UID(TLCPJM) R(A) W(P) E(A)

CA ACF2 for z/VM protects the PROD.TEST file on the TLCAMS 0191 minidisk in ABORT mode, while CA ACF2 for z/VM logs any invalid access to the PROD.MASTER file on the same minidisk. For more details on NEXTKEY, see the Administrator Guide.