IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  Doubts how to build a CARLa script solution

    Posted 03/05/21 11:32 PM

    I have this CARLa script working :

    ............

    newlist type=racf_access nopage

    select class=group profile='CONSULT'

    Sortlist id

    .............

    But, I need to create and execute CARLa COPY commands to every userids that results from this Select. The idea is to COPY USERa to USERb for every userid in the CONSULT group.

    Could someone help me with it ?

    Thank you


    #ZSecurity
    #SupportMigration
    #Support


  • 2.  RE: Doubts how to build a CARLa script solution

    Posted 03/08/21 07:49 AM

    zSecure provides a special DD name for generating CARLa commands: CKR2PASS. When you write CARLa commands into this DD, in ISPF you are shown the commands and you can type GO to execute them.

    In batch jobs, procedure C2RC2 can be used to execute the commands in CKR2PASS.

    newlist type=racf_access nopage dd=CKR2PASS

    select class=group profile='CONSULT'

    Sortlist 'COPY USER=' | id(8) 'TOUSER=xxxxxxxx'

    Except you probably want to apply some changes to the user ID. You could add a DEFINE command to select the part you want to kee, like so:

    newlist type=racf_access nopage dd=CKR2PASS

    define partial as substr(id,5) /* copy from position 5 to end */

    select class=group profile='CONSULT'

    Sortlist 'COPY USER=' | id(8) 'TOUSER=EXTR' | partial(0)


    #SupportMigration
    #ZSecurity
    #Support