How can I list all logonid that start with the characters SR that are suspended have TSO privileges and were canceled today?

Products

• ACF2
• ACF2 - DB2 Option
• ACF2 for zVM
• ACF2 - z/OS
• ACF2 - MISC
• PanApt
• PanAudit

Issue/Introduction

How can I list all logonid that start with the characters SR that are suspended have TSO privileges and were canceled today?

Environment

Release:
Component: ACF2MS

Resolution

The LIST subcommand lets a logonid with the ACCOUNT, SECURITY, or AUDIT privilege display logonid records. The TSO ACF LIST command can be used to LIST logonid based on flexible record selection criteria using the If(field,...,field) parameter.

If(field,...,field)

Lets you define flexible record selection criteria. This parameter is formatted similarly to a high-level programming language IF statement. The variables available for processing are the various logonid record field names or constants (defined in the following). The available operators are also defined in the following. The full IF expression is evaluated as an algebraic expression yielding a TRUE (that is, select record) or FALSE (that is, bypass record) value. If the result of the IF expression is a quantity, NONZERO is considered TRUE (selected) and a zero value is considered FALSE (not selected). Parentheses can group expressions to override the normal precedence order.

When specifying a constant (specific value) in the IF statement, use the formats listed in the following table:

Format		Contents	Type
'aaaa' or C'aaaa'		Alphanumerics	Character fields
Nnnn		Numerics	Binary number fields
X'xx'		Hex numbers	Hex fields
B'n'		1 or 0 (1=on, 0=off)	Bit (flag) fields
P'nn'		Numerics	Packed decimal fields
D'mm/dd/yy' or D'dd/mm/yy' or D'yy/mm/dd' or	Numerics with dividing Date field slashes (the format used is based on local system option). See the following note. Use single quotes before  and after the date.
U'xxxx'	Any of the previous contents can be used. CA ACF2 resolves the type whatever the field is defined as in the @CFDE.

Example: To list all logonid that start with the characters SR that are suspended have TSO privileges and were canceled on a specific date:

ACF
list like(SR-) if(suspend, tso, csdate = d'04/13/17')