ACF2 rule in class JESJOBS for job submit was not validating the resource name correctly and jobs were submitted when they should have been rejected.

Products

• ACF2 - z/OS

Issue/Introduction

setup rules for JESJOBS resource which should only allow certain jobnames to be used.
jobs were being allowed when they should have been rejected.

resource name is SUBMIT.lparname.jobname.userid

 

Environment

Release : 16.0

Component : CA ACF2 for z/OS

Resolution

rules were written for resource SUBMIT.PLEX3.JJJJJJJJ.USER30

$KEY(SUBMIT) TYPE(JEJ)
-.USER-.-      LOG

resource test showed that this rule line was matching the resource.
The writer was expecting the rule to test the jobname field(JJJJJJJ) but actually matched the userid.

The following adjustemnt resolved the problem.

$KEY(SUBMIT) TYPE(JEJ)
  *-.USER-.-      LOG

The "*-"  would match against the first entry only
andd then the next level ("user-"  would be checked against the jobname and not the userid.