Coding Each AOF Rule Type › Security Rules › RETURN Statements in the )PROC Section of an SEC Rule

RETURN Statements in the )PROC Section of an SEC Rule

The OPS/REXX RETURN statement specifies the final disposition of a security event. The RETURN statement can:

• Refer a security event to the OPUSEX security exit.
• Force CA OPS/MVS to deny access to a requested facility.
• Allow access to a requested facility.

Valid values for a RETURN statement in the processing section of a security rule are as follows:

NOACTION

Allows the event to occur with no intervention from the AOF. CA OPS/MVS passes the event to the OPUSEX security exit after AOF processing (if any). This is the default.

ACCEPT

Allows access to the requested facility and does not call the OPUSEX security exit.

REJECT

Denies access to the requested CA OPS/MVS facility and does not call the OPUSEX security exit.

Note: The return values listed here are character constants rather than keywords. An unrecognized return value, a misspelled value for example, defaults to a value of NOACTION.

If multiple rules respond to a single security event, the AOF uses the highest-precedence return value. The order of precedence is:

• REJECT (highest)
• ACCEPT
• NOACTION (lowest)