The Logonid Access Report shows all data access rules and resource rules that apply to a specific logonid (LID) mask or User Identification (UID) mask.
ACFRPTRX searches the online Access Rule database or online Information Storage database for each LID or UID processed and compares the input UID against the UID in each rule entry. If the UID matches, ACFRPTRX prints the ruleid ($KEY) and the entire rule entry. ACFRPTRX also determines if the UID can change (%CHANGE or %RCHANGE) any access rules or resource rules, and prints that information in the report.
A message line and access reason code highlight all accesses that are allowed because of special CA ACF2 for z/VM privileges (such as NON‑CNCL, READALL, PREFIX, SECURITY, and so on). If a UID has no access authority or is suspended, ACFRPTRX prints a descriptive message indicating these conditions. See the ACFRPTRX Messages section for more information tm.
To run this report, you must have the SECURITY, ACCOUNT, or AUDIT privilege to use the online CA ACF2 for z/VM databases. Only those logonids records and rule records you normally have access to are included in this report.
ACFRPTRX simulates normal CA ACF2 for z/VM rule interpretation and checking, but does not simulate the actions of any site exits or other code.
This chapter contains information on generating this report manually, through the full‑screen feature, and through the ACFRPTS utility. It also contains information on how to read and interpret the output.
When you have finished this chapter, you will be able to:
This section contains the following topics:
Report Parameter Cross Reference
Running the Report Manually and Using ACFRPTS
|
Copyright © 2009 CA Technologies.
All rights reserved.
|
|