Can ACF00RBS show both users and groups that are defined in given group?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC

Issue/Introduction

A report of both  users and their roles/group of roles is desired, but did not appear to be possible, regardless of settings of XRLFUNC and XRLFLAG parameters.   

Environment

Release : 16.0

Component : CA ACF2 for z/OS 

Cause

Unexpected output 

Resolution

There is no way to specify the highest level role and get all roles and users returned.

The input parameters are either return roles or return users... not both.

This code was run to obtain the results:

MVC  XRLEYE,=CL4'XRBS' SET EYECATCHER

MVI  XRLVER,XRLVCUR    SET PLIST VERSION

MVI  XRLFUNC,XRLRETG   SET FUNCTION CODE

LA   R15,XRLLN         GET LENGTH OF CB

ST   R15,XRLLEN        SAVE LENGTH OF CB IN CB

LA   R15,ROLENAME      POINT AT USERID

ST   R15,XRLSRCID      SAVE LID ADDRESS

OI   XRLFLAG,XRLINGRP  INPUT IS GROUP

LA   R1,XROLE          POINT AT PLIST

CALL ACF00RBS          CALL RBS BUILD ROUTINE

With these role records...

INSERT CHILD INCLUDE(TIM)

INSERT FATHER INCLUDE(CHILD) GROUP

INSERT MOTHER INCLUDE(CHILD) GROUP

INSERT MGRANDMA INCLUDE(MOTHER) GROUP

INSERT MGRANDPA INCLUDE(MOTHER) GROUP

INSERT PGRANDMA INCLUDE(FATHER) GROUP

INSERT PGRANDPA INCLUDE(FATHER) GROUP

INSERT PGR8GNMA INCLUDE(PGRANDPA) GROUP

INSERT PGR8GNPA INCLUDE(PGRANDMA) GROUP

INSERT MGR8GNMA INCLUDE(MGRANDMA) GROUP

INSERT MGR8GNPA INCLUDE(MGRANDPA) GROUP

Query tests: 

rolename = CHILD  

parms:   XRLFLAG = XRLINGRP;  XRLFUNC = XRLRETG

result: all the role names are returned.

rolename = TIM  

XRLFUNC,XRLRETG returns CHILD

there is no way to specify the highest level role and get all roles and users returned.

the input parameters are either return roles or return users... not both.