Controlling Access Using SAF › SAF Entity Types › WARN—Control Warn Mode

WARN—Control Warn Mode

The WARN entity controls whether warn mode is in effect for the user or for a specific entity type.

If warn mode is on for the user, the results from all SAF calls are recorded in the job log of the user. If warn mode is on for a specific entity, then only calls for that entity are recorded in the job log. When warn mode is in effect, the results are recorded in the job log and access to the entity is always allowed. Warn mode is convenient for displaying which entities had a security check without failing access to the entities. Warn mode is also helpful for debugging purposes.

The WARN entity has the following format:

SV.WARN.system.userid

system

Specifies the SMF system ID.

userid

Specifies the user ID of the user.

If read access is granted to this entity, all SAF calls are recorded in the job log and access to all entities is allowed.

The WARN entity for a specific entity has the following format:

SV.WARN.system.entitytype

system

Specifies the SMF system ID.

entitytype

Specifies the type of entity.

When read access is granted to this entity:

• The SAF calls for the entity are recorded in the job log
• The access to the entity is allowed

Note: See HELP GSV4204I for a description of the trace message format.