Scope of validity of default protection rules

In default protection rules, the object names are specified without a path (i.e. without a pubset ID and user ID). The default values are taken from the active user-specific rule container, which is created on the same pubset and under the same user ID as the file or job variable to which the values are to be assigned.

If not all default values can be obtained from the user-specific active rule container, the pubset-global active rule container is taken from this pubset.

The attribute guards with the default values and (for system administration) the user ID guards with the user ID lists must be created on the same pubset as the rule container used for evaluation.