IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
Expand all | Collapse all

Blank Rows Returned In Carla Query

  • 1.  Blank Rows Returned In Carla Query

    Posted Thu December 03, 2020 01:05 PM

    Hi, everyone. I'm trying to produce a delimited list of all IDS and some of their attributes, such as special, operations, revoke, etc. I get the output, but many of the rows do not show data other than my '|' delimiters. The delimiters '|' are shown in the correct positions, but many show with blank data. I show my query below. Any suggestions?

    newlist type=RACF nopage

    select class=user segment=base

    sortlist key(8) '|' pgmrname '|' special, '|' grpspec,

    '|' operations,

    '|' auditor '|' passint '|' protected '|' restricted '|',

    revoke(8) '|' revoke_inactive '|' usrdata '|' netid '|' notes

    Thank you again for your help.


    #Support
    #SupportMigration
    #ZSecurity


  • 2.  RE: Blank Rows Returned In Carla Query
    Best Answer

    Posted Wed December 09, 2020 05:26 PM

    I changed my code back to when it was working correctly by removing the fields that I added. It started working correctly again. Then one-by-one I added each field back, ran it, and it worked. So I have it working now. No idea why.


    #Support
    #SupportMigration
    #ZSecurity


  • 3.  RE: Blank Rows Returned In Carla Query
    Best Answer

    Posted Mon February 22, 2021 11:53 AM

    There are two types of fields in RACF profiles:

    • normal fields, that have one value
    • repeated fields, that can have zero (in some cases), one or more value.

    An example of repeated fields is connect group information. The field CONGRPNM contains one or more connect group names (in chronological order). The field CONGRPCT specifies the number of rows (entries) in this list.

    Repeated fields can also be found in combinations, where several fields should be interpreted together. We refer to these as repeat groups. The alphabetical list of connect group names is available in CGGRPNM, CGFLAG2 shows if the user has group special in this group.

    You can see the field names using TEMPLATE command in ISPF. The fields in a repeat group are tied together with the (count) field name in the Group column.

    Anyway, the SORTLIST commands prints the entries of repeat group fields in lines AFTER the main fields, with the normal fields left empty. So it may look like there are empty lines generated, but these are lines with a blank value of the repeated field. In your case, you printed the grpspec repeated field, with is blank for each connect group (unless the user has group special in a group).

    You can use the NEWLIST RETAIN parameter to repeat the normal fields on each of these follow-up lines. You could also define a BOOLEAN field if any of the connect groups is defined with special:

    define type=racf any_group_special(1,"g",hb) boolean where grpsp


    #Support
    #SupportMigration
    #ZSecurity