IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Back to discussions
Expand all | Collapse all

zSecure - How to prevent the dashes in -group- and -any- from displaying in the ACL User column.

  • 1.  zSecure - How to prevent the dashes in -group- and -any- from displaying in the ACL User column.

    Posted Fri May 02, 2025 10:23 AM

    How can I remove the dashes from -group- and -any- in the below sample dataset owner report. When we send this report as type CSV to an excel spreadsheet, the dashes are interpreted as a formula.                                        

      newlist type=racf                                         

      select c=dataset owner=(billyjoe) and acl(access>READ)     

      def acl   subselect acl(access>read)                      

      sortlist searchkey(nd) key('RACF DSN Profile',44) owner acl(sort,26) acl:name    

    My sample report:

    RACF DSN Profile         Owner    User     Access  ACL id    Name           

    CATALOG.VB50004          BILLYJOE - any -  CONTROL *                        

                                      -group-  ALTER   SYS1                     



    ------------------------------
    Frank Martinez
    ------------------------------


  • 2.  RE: zSecure - How to prevent the dashes in -group- and -any- from displaying in the ACL User column.

    Posted Fri May 02, 2025 11:51 AM
    Edited by Rob van Hoboken Fri May 02, 2025 11:52 AM

    Hi Frank

    First of all, you can override the column type in your Excel import function and set it to Text.  This is also handy if you have user IDs with a 3 character 2 numbers format, like MAY01 or AUG32.

    You can also change the ACL field into 2 colums, thus removing the confusing User column by specifying a format like so:

     sortlist searchkey(nd) key('RACF DSN Profile',44) owner acl(aclid,8) acl(aclaccess,7) acl:name     

    Unfortunately, that stops being useful when you decide to EXPLODE or RESOLVE the ACL.

    Finally, you can change your query from RACF to RACF_ACCESS, again, that prevents you from EXPLODE and RESOLVE reporting.

      newlist type=racf_access

      select c=dataset :owner=billyjoe access>READ
      exclude access=qualown

      sortlist profile('RACF DSN Profile',44) :owner id access id:name



    ------------------------------
    Rob van Hoboken
    ------------------------------

    Original Message


  • 3.  RE: zSecure - How to prevent the dashes in -group- and -any- from displaying in the ACL User column.

    Posted Mon May 05, 2025 11:03 AM

    Hi Rob - The 3rd solution "newlist type=racf_access" worked perfectly!

    Thank you very much!



    ------------------------------
    Frank Martinez
    Senior Technical Analyst
    BCBSSC - Companion Data Services
    Pearland TX
    ------------------------------

    Original Message


Related Content