XFACILIT implementation example 3: Using ACF2

OEM security servers need the commands converted to the specific product, such as the following ACF2 commands. The requirement is that the SAF RACROUTE requests give the equivalent return information for the OEM product, as would happen with RACF®. The following is an example for ACF2.

$KEY(TEST)
 ZZ.HISTORY.- UID(<string for MVS support>) READ(A) WRITE(A) ALLOC(A) EXEC(A)
 ZZ.HISTORY.- UID(*)
Here, the TEST.ZZ.HISTORY.* history files can only be directly accessed by the users in the <string for MVS support> list.
$KEY(IDIHIST_USERID_DSN) TYPE(XFC) or $KEY(IDIHIST_GROUP_DSN) TYPE(XFC)
 -.TEST.ZZ.HISTORY.- UID((<string for MVS support>) ALLOW
 -.TEST.ZZ.HISTORY.- UID(*) SERVICE(READ,UPDATE) ALLOW
TYPE(XFC) is the default for XFACILIT class. This setup only allows general users READ and UPDATE access, only MVS support can do explicit delete of fault entries. Automatic deletion is still done by Fault Analyzer according to the SetMaxFaultEntries/SetMinFaultEntries setting of each history file.