ACF2 prefix ownership dataset report acfrptds prefix(********)

Products

• ACF2 - z/OS

Issue/Introduction

If a user does not have explicit access to a dataset but gets access because of NON-CNCL a record is written to SMF.

Does the same thing apply to access by having a PREFIX(********)?

Environment

Release : 16.0

Component : ACF2 for z/OS

Resolution

The RMRC field of ACFRPTDS will contain OWNED if the user owned the dataset - but there is no reference to the value of prefix in the report.

Sites can check that the HLQ of the dataset being accessed was not the same as the logonid and then confirm that prefix(********) was specified by looking at the logonid record. 

There is no logging when access to a dataset is allowed due to the logonid PREFIX.

If the TRACE bit is set on the logonid with PREFIX, the ACFRPTDS report will display OWNED in the report 'rmrc' which indicates means that access was allowed because the user was deemed to be the owner of the dataset - according to the prefix in the logonid record.