ACF2 Cleanup Refreshing Tracking Database with Updated Rules

Products

• Cleanup
• ACF2
• ACF2 - z/OS

Issue/Introduction

Some rules for DB2 tables have been updated, removing all the rule lines, adding the keyword ROLESET and adding a bunch of rulelines specifying ROLE or USER. How can ACF2 Cleanup be updated to to understand what has changed without wiping out all the tracking its doing for all the other rules we have for datasets, etc?

Resolution

Changed rules can be 'reloaded' without wiping out the load date of the rule.

Sites can do a *RELOAD* of all changed rules or specify specific rules:

*RELOAD* :                                                                  
Reloads only the items currently being tracked. Existing Cleanup database entries are updated but new users and profiles are not added to the Cleanup database.   

Here is sample JCL:

//JOBCARD
//S1      EXEC PGM=AT5#DBU,REGION=4M                           
//SYSPRINT  DD SYSOUT=*                                        
//SYSOUT    DD DUMMY                                           
//SORTWK01  DD UNIT=3390,SPACE=(CYL,(15,15),RLSE)                        
//SORTWK02  DD UNIT=3390,SPACE=(CYL,(15,15),RLSE)                        
//*                                                            
//*DBASE    DD DISP=SHR,DSN=CAI.CLEANUP.DATABASE.DATASET.NAME   
//DBASE    DD DSN=CAI.CLEANUP.DATABASE.DATASET.NAME           
//            DISP=(,CATLG,DELETE),SPACE=(CYL,(10,15),RLSE),  
//            RECFM=VB,LRECL=584,BLKSIZE=0,             
//            UNIT=SYSDA,VOL=SER=??????                       
//DBBACKUP  DD UNIT=SYSDA,SPACE=(CYL,(50,50),RLSE)             
//INCLUDE   DD *                                               
* - DATA MUST BEGIN IN COLUMN ONE WHERE AN ASTERISK DENOTES A COMMENT
* - COLUMNS 1 THRU 8 OF EACH INCLUDE REQUEST NAME EITHER A USERID    
*   OR RULESET TO BE LOADED OR REFRESHED.                            
* - SPECIFY *ALL* TO LOAD THE ENTIRE SECURITY FILE.                  
* - SPECIFY *RELOAD* TO REFRESH AN ENTIRE EXISTING DATABASE.
* - SPECIFY $KEY(DEMO) TO REFRESH THE EXISTING DATASET ACCESS RULE DEMO          
* - SPECIFY $KEY(CEMT) TYPE(CKC) TO REFRESH THE EXISTING CEMT RESOURCE RULE
*RELOAD*                                                                                            
//EXCLUDE   DD *                                               
//SYSIN DD *
//    

Sample OUTPUT when specifying INCLUDE DD input $KEY(DEMO):

 -End of input data-                  
                                      
    Record will be reloaded: DSN  DEMO
    Loading DSN  DEMO                 
                                      
 End-of-Job, RC=00