How do I use ACF2 RECKEY MOD option to update/modify an existing rule entry?

Document ID:  TEC1093067
Last Modified Date:  07/03/2017
{{active ? 'Hide' : 'Show'}} Technical Document Details

Products

  • CA ACF2 for z/OS

Components

  • CA ACF2 for z/OS:ACF2MS
Question:

How do I use ACF2 RECKEY MOD option to update/modify an existing rule entry?

Answer:

The RECKEY subcommand assists security administrators in maintaining rule sets and compiled infostorage rule records. This subcommand allows the user to decompile, add, delete or modify a rule entry, recompile, and store the updated rule set with one command. 

The MOD parameter will will replace a rule line or control statement with another rule line or control statement.

The syntax of the RECKEY subcommand is as follows:

RECKEY ruleid {ADD(rule-entry)|DELETE(rule-entry) |MOD(rule-entry, rule-entry)}


Sample Rule:


$KEY(PAYRNR) TYPE(CKC)   

UID(PAY*USER01*Z) ALLOW       


Sample RECKEY command to change Access to LOG:


RECKEY PAYRNR MOD(UID(PAY*USER01*Z) ALLOW,UID(PAY*USER01*Z) LOG)     


 ACF75052 RESOURCE RULE PAYRNR STORED BY USER002 ON 07/03/17-09:16
 ACF60202 THE FOLLOWING RULE LINE(S) WILL BE REPLACED             
 UID(PAY*USER01*Z) ALLOW                                          
 ACF70010 ACF COMPILER ENTERED                                    

                                                                  
 ******** RESOURCE RULE PAYRNR STORED BY USER002 ON 07/03/17-09:16
 $KEY(PAYRNR) TYPE(CKC)                                           
 UID(PAY*USER01*Z) LOG                                            
 ACF70051 TOTAL RECORD LENGTH= 166 BYTES, 4 PERCENT UTILIZED     

 

 

Please help us improve!

Will this information enable you to resolve your issue?

Please tell us what we can do better.

{{feedbackText.length ? feedbackText.length : '0'}}/255

{{status}}

Not what you were looking for?

Search Again >

Product Information

Support by Product >

Communities

Join a Community >

Chat with CA

Just give us some brief information and we'll connect you to the right CA ExpertCA sales representative.

Our hours of availability are 8AM - 5PM CST.

All Fields Required

connecting

We're matching your request.

Unfortunately, we can't connect you to an agent. If you are not automatically redirected please click here.

  • {{message.agentProfile.name}} will be helping you today.

    View Profile


  • Transfered to {{message.agentProfile.name}}

    {{message.agentProfile.name}} joined the conversation

    {{message.agentProfile.name}} left the conversation

  • Your chat with {{$storage.chatSession.messages[$index - 1].agentProfile.name}} has ended.
    Thank you for your interest in CA.


    Rate Your Chat Experience.

    {{chat.statusMsg}}

agent is typing