This technical knowledge document will describe the format expected when converting from a .csv file to a .BPR file
No header is expected for a CSV file.
The line format is the following:
[Rule Type],[Rule ID],[Description],[Name1],[Name2],?,[Name N]
Comma is always treated as a separator. No quotes are allowed.
Examples:
BPR ROLE ROLE MAY,Rule1,Some Description?,BASIC ROLE,Administrators BPR RES RES FORBIDDEN,Rule2,,APPLDEV,RACFTEST,RACF22,UG5AVEGEN,NT5AVE,WinNT
Where:
[Rule ID] is a unique rule identification string
[Description] is the rule description (may be empty)
[Name 1-N] Entity Names: 1-3 names for the first entity, then 1-3 names for the second (For example, 2 names for a role-role, 4 names for role-res, and 6 names for a res-res restrictions)
[Rule Type] is one of the following:
BPR ROLE ROLE MAY BPR ROLE ROLE MUST BPR ROLE ROLE FORBIDDEN BPR ROLE ROLE ONLY ALLOWED BPR ROLE ROLE BY ROLE MAY BPR ROLE ROLE BY ROLE MUST BPR ROLE ROLE BY ROLE FORBIDDEN BPR ROLE ROLE BY ROLE ONLY ALLOWED BPR ROLE RES MAY BPR ROLE RES MUST BPR ROLE RES FORBIDDEN BPR ROLE RES ONLY ALLOWED BPR ROLE RES BY ROLE MAY BPR ROLE RES BY ROLE MUST BPR ROLE RES BY ROLE FORBIDDEN BPR ROLE RES BY ROLE ONLY ALLOWED BPR RES RES MAY BPR RES RES MUST BPR RES RES FORBIDDEN BPR RES RES ONLY ALLOWED BPR RES RES BY ROLE MAY BPR RES RES BY ROLE MUST BPR RES RES BY ROLE FORBIDDEN BPR RES RES BY ROLE ONLY ALLOWED BPR USER ATTR ROLE MAY BPR USER ATTR ROLE MUST BPR USER ATTR ROLE FORBIDDEN BPR USER ATTR ROLE ONLY ALLOWED BPR USER ATTR ROLE ATTR MAY BPR USER ATTR ROLE ATTR MUST BPR USER ATTR ROLE ATTR FORBIDDEN BPR USER ATTR ROLE ATTR ONLY ALLOWED BPR USER ATTR RES MAY BPR USER ATTR RES MUST BPR USER ATTR RES FORBIDDEN BPR USER ATTR RES ONLY ALLOWED BPR USER ATTR ATTR MAY BPR USER ATTR ATTR MUST BPR USER ATTR ATTR FORBIDDEN BPR USER ATTR ATTR ONLY ALLOWED BPR SOD ROLES NO MORE BPR SOD ROLES AT LEAST BPR SOD ROLES EXACTLY BPR SOD RESOURCES NO MORE BPR SOD RESOURCES AT LEAST BPR SOD RESOURCES EXACTLY BPR ROLE USER COUNT NO MORE BPR ROLE USER COUNT AT LEAST BPR ROLE USER COUNT EXACTLY BPR RES USER COUNT NO MORE BPR RES USER COUNT AT LEAST BPR RES USER COUNT EXACTLY