ACF2 @CFDE Macro FLAGS=RESTRICT can it be removed from a user defined field?

book

Article ID: 198459

calendar_today

Updated On:

Products

CA ACF2 CA ACF2 - DB2 Option CA ACF2 for zVM CA ACF2 - z/OS CA ACF2 - MISC CA LDAP Server for z/OS CA PAM Client for Linux for zSeries CA Web Administrator for Top Secret

Issue/Introduction

        @CFDE LOC,LIDLOC,CHAR,LIST=ALL,GROUP=20,ZERO=NO,
      ALTER=SECURITY+ACCOUNT,FLAGS=NULL+RESTRICT    

what would be the impact of removing FLAGS=RESTRICT for this field?

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

This is a user defined field and it was originally defined with FLAGS= RESTRICT.
Therefore it can be removed if they want to.
FLAGS=RESTRICT means that only an unrestricted security offiver can change the field.
the only question is whether or not the field needs to be as secure as flags=restrict.