12
© 2002. Xephon UK telephone 01635 33848, fax 01635 38345. USA telephone (303) 410 9344, fax (303) 438 0290.
Authprof
Authprof is a special profile used by this program to control access to
specific fields within any resource profile. It is defined in the standard
RACF FIELD class, and follows the standard naming conventions for
field-level access to all segments, except for USERDATA which is not
a segment name but has special meaning in the implementation of
MCINTY access checking.
Profile format
The format of the profile is:
class.segment.field
or class.USERDATA.field
where:
•‘Class’ is the name of the RACF class in which the profile is
defined.
•‘Segment’ is the name of the segment containing the field to be
accessed. For userdata fields, the segment name is always
USERDATA.
•‘Field’ is the name of the field to be accessed.
An example profile might be USER.BASE.DFLTGRP
Special use of ‘?’
Generics can be used to allow access to a range of segments/fields, but
special use is made of the ‘class.?’ and ‘class.segment.?’ profiles.
Access to these profiles enables a user to process as follows:
• ‘Class.?’. All fields in any segment in the specific class (this
includes all userdata fields).
• ‘Class.segment.?’. All fields in the segment and class (this
excludes userdata fields).
• ‘Class.USERDATA.?’. All userdata fields in the named class.
This is to avoid the need for an administrator with wide scope having
to be put on the access list for all individual fields.
Komentáře k této Příručce