OPS/REXX Built-in Functions › OPSECURE Function

OPSECURE Function

The OPSECURE function uses a set of subfunctions to return information that is related to CA ACF2, RACF, or CA Top Secret. OPSECURE returns the following types of information:

• Subfunction code A extracts data from the standard security control block (ACEE).
• Subfunction code D verifies data set access.
• Subfunction code F fetches a field from a logon ID record.
• Subfunction code I returns information about the security product on your system.
• Subfunction code P enables you to validate a user password, set a new one, or both.
• Subfunction code R requests general resource information.

Note: You can use the OPSECURE function in OPS/REXX or AOF rules.

OPSECURE has the following format:

var = OPSECURE(subfunction,arguments)

You can call OPSECURE only if CA ACF2, RACF, or CA Top Secret are installed and activated. OPSECURE returns the string UNKNOWN SECURITY PRODUCT for the following reasons:

• If no security product is installed
• If the security product has not started yet
• If the security product is started after CA OPS/MVS

If CA OPS/MVS determines that CA ACF2, RACF, or CA Top Secret is installed but not active, OPSECURE returns the string SECURITY PRODUCT INACTIVE.

If the security product was unknown to CA OPS/MVS, issue the following command after the security product is started:

F OPSx,RESTART(SECURITY)

This command forces CA OPS/MVS to recheck and then become aware of the security product. In addition, OPSECURE returns UNKNOWN USER PRODUCT if used in a )SEC rule and the security package is not yet available.