NON-CNCL access not being logged

Products

• ACF2 - z/OS

Issue/Introduction

The logonid has NON-CNCL privilege, however no access is logged in ACFRPTRV report. Why are the loggings suppressed?

Environment

Release : 16.0

Resolution

NON-CNCL access should log all the validations that are being done by the logonid with the following exceptions:

- If there is a rule that allows access, then NON-CNCL privilege is not checked and if rule entry specifies allow only, then the access is not logged or SMF record is not cut

- If the access matches the MAINT environment, there will be no logging 

To verify what resource validations are being driven, put a trace bit on logonid,  access the resource that logonid is part of and review ACFRPTRV report:

- Put a trace bit on

SET LID
CHANGE logonidT TRACE

- Access any resource that logonid is part of

- Turn trace bit off

SET LID
CHANGE logonid NOTRACE

- Run ACFRPTRV report pointing to SMF active at the time of recreate