IBM Security Z Security

Security for Z

Join this online user group to communicate across Z Security product users and IBM experts by sharing advice and best practices with peers and staying up to date regarding product enhancements.

 View Only
  • 1.  sensdsn report

    Posted Mon April 03, 2023 12:51 PM

    I have used the following carla code to create a sensdsn report. It has the racf_acl which produces the access list for all of these datasets. This is what I want however it is too much. I am trying to restrict the acl to just those entries that are equal to or greater than the value in the risk field. Any guidance would be appreciated. 

    newlist type=sensdsn required retain pl=0,

         esm=racf nodup header=column

    select exists(priv_access)

    sortlist,

     complex,

     system,

     dsname(44),

     racf_profile(44),

     racf_uacc,

     racf_acl,

     risk,

     priv_access("Priv_Access",firstonly,11),

     priv_senstype(firstonly),

     priv_concern(firstonly,200)



    ------------------------------
    Peter Roberts
    ------------------------------


  • 2.  RE: sensdsn report

    Posted Tue April 04, 2023 03:07 AM

    Hi Peter
    Basically, you are interested in the list of users that have TRUSTED level of access to the data set.  That would be something like

    newlist type=trusted title="direct permits"
      select class=dataset userid_privilege=permitUsr
      summary complex system resource racf_profile racf_profile:uacc userid "-"(8) access risk senstype concern
    newlist type=trusted title="connected to groups with a permit"
      select class=dataset userid_privilege=permitGrp
      summary complex system resource racf_profile racf_profile:uacc userid via access risk senstype concern
    newlist type=trusted title="excessive UACC"
      select class=dataset userid_privilege=Uacc
      summary complex system resource racf_profile racf_profile:uacc "*"(8) "-"(8) access risk senstype concern



    ------------------------------
    Rob van Hoboken
    ------------------------------