Usage and removal of ACF2 $KEY access rules in lowercase
search cancel

Usage and removal of ACF2 $KEY access rules in lowercase

book

Article ID: 186147

calendar_today

Updated On:

Products

ACF2 ACF2 - z/OS ACF2 - MISC

Issue/Introduction

It was recently discovered that there are some lowercase $KEY access rules for datasets.

It does not seem possible to list or change them from the ACF prompt, panels, or batch.

This is an example of one of the rules: 
*ACF75052 ACCESS   RULE sys1 STORED BY ADMIN ON 00/10/06-04:40
$KEY(sys1)
'SYS1.AMODGEN' UID(ABC) READ(A) EXEC(A)
'SYS1.AMODGEN' UID(EFGH***) READ(A) WRITE(A) ALLOC(A) EXEC(A)
'SYS1.BRODCAST' UID(*) READ(A) WRITE(A) EXEC(A)

Another $KEY(SYS1) (uppercase) also exists. 


How can a lowercase $KEY be specified? (the prompt, panels and batch automatically uppercase them)
Being that sys1 does not have a prefix(SYS1), does this rule still work? 
Does ACF2 uppercase the validation by default? 
How can these rules be removed?

 

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

ACF2 does not create and maintain lower case access rules and the native ACF2 compiler would not allow rules to be added with lowercase characters.

In most cases, ETF/A is the product that allows lowercase access rules to be used. ETF/A utilities and commands should be used to manage the rule. 

Options to remove these rules within ACF2 are limited. 

Steps for removal with ACF2 include:

  1. Backup the PRIMARY databases to a flat file.
  2. Modify the flat file to delete the lowercase records.
  3. IDCAMS repro the backups to the ALTERNATE database.
  4. SWITCH to the ALTERNATE databases to verify everything is working as expected.
  5. Once confirmed, repro the backups to the PRIMARY.
  6. SWITCH back to the PRIMARY.