Controlling Access to the Hierarchical File System › HFSSEC Control Option › Exit Processing › Exit Return Processing

Exit Return Processing

When the exit returns a user directory path location, CA SAF HFS processing uses that path name to determine if the path name to be validated should be translated to a form such that the user ID of the owner of the path becomes the high‑level qualifier of the path name. This allows HFS file rules to be written at the user level. The default is that no translation takes place for user directories.

If the exit returns the value /u/ as the user directory path name location, and the file accessed is /u/user01/xfile, then the resource name validated is $$USER01.XFILE.When the exit returns the character ‘Y’ indicating that user ownership of files within one’s own directory is in effect, no validation is performed when the current user’s logonid matches that in the user directory.

This option is meaningless if a user directory path location is not also returned.

Example: access validation

In this example validation is bypassed when USER01 accesses file /u/user01/xfile:

TSS PER(USER01) HFSSEC($$%)
                ACCESS(UPDATE)