ACF2 R(TGR) rules for validating GROUP by Program ACFFFPNL
search cancel

ACF2 R(TGR) rules for validating GROUP by Program ACFFFPNL

book

Article ID: 135227

calendar_today

Updated On:

Products

ACF2 ACF2 - DB2 Option ACF2 for zVM ACF2 - z/OS ACF2 - MISC

Issue/Introduction


An STC generates a validation call against R(TGR) with resource ********.

Why does this occur?


    DATE     TIME        SOURCE   JNAME    LID      NAME                 DISP      REC SERV LOOKUP-KEY 

PRE PST RMC INT FIN UID                       CPU  MODULE   KEY-MOD  DSP-MOD  

MLS     USER-SECLABEL RSRC-SECLABEL MODE   SRC     RRC      RSN               

19.205 07/24 09.33.23.41 STCINRDR D2X1WLMA DB2HLO1 IDAA LOADER -P        RULE TRC      READ RTGR-********

  0   0   0   4   4 CA4010010PLX3 DxxHLO1     abcd ACFFFPNL DIRECTRY - RTGR-********

                                                                              

RESOURCE NAME: ********                                                       


Why is this validation occurring.

What is ACFFFPNL?

 

Environment

Release : 16.0

Component : CA ARCSERVE WINDOWS SIMPLIFIED CHINESE

Resolution

When an init_usp request is issued to "signon" to omvs ACF2 will create a list of all the groups that a user is connected to and places that in a control block attached to the acee.


This is done by program ACFFFPNL which checks the users access to every resource rule that is written in type(TGR). If there is a rule with $KEY(*******) and the user has access, it will be added to the list of grouops for this user. 


If the user has trace on the logonid, all access checks will be logged to SMF and reported with the requesting program name being ACFFFPNL.


If the user does not have trace, there are no loggings of the TGR validations.