How to override a generic SAF rule in ACF2

Article Id: 192573

Status: Published

Updated On: 09-06-2020 13:03

Products:

CA ACF2 , CA ACF2 - z/OS , CA ACF2 - MISC

Issue/Introduction:

The generic rule gets picked up instead of the resource rule for Pervasive Encryption.

$KEY(****************************************) TYPE(SAF)
UID(*) LOG
ACF75051 TOTAL RECORD LENGTH= 238 BYTES, 0 PERCENT UTILIZED,

$KEY(AES256) TYPE(SAF)
PRD.SUPPORT.06022020 UID(********SYSPROG) ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))

How can this be fixed without changing the default rule?

Environment:

Release : 16.0

Component : CA ACF2 for z/OS

Resolution:

The complete resource name needs to be in the $KEY.

$KEY(AES256.PRD.SUPPORT.06022020) TYPE(SAF)
UID(********SYSPROG) ALLOW WHEN(CRITERIA(SMS(DSENCRYPTION)))