Domain: | SECURITY-ADMINISTRATION |
Privileges: | STD-PROCESSING, GUARD-ADMINISTRATION |
This command can be used to display any or all of the access conditions and guard attributes stored in a guard provided that the caller is permitted to use this guard (SCOPE attribute).
Information about the conditions which apply to the caller can be displayed by means of the /SHOW-ACCESS-ADMISSION command.
SHOW-ACCESS-CONDITIONS | ||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||
|
GUARD-NAME = * / <filename 1..24 without-gen-vers with-wild(40)>
Name of the guard to be displayed. This name may contain wildcards. If wildcards are specified in the name, all guards which match the resulting pattern are displayed.
The specification of the system default ID in the guard name, e.g. $<filename> or $.<filename>, is not supported.
GUARD-NAME= *
All guards are to be displayed.
SELECT =
Conditions which are to be displayed.
SELECT = *ALL
All information stored in all guards selected with the operand GUARD-NAME is to be displayed.
SELECT = *BY-ATTRIBUTES(...)
This operand selects the conditions to be displayed.
SUBJECTS =
Subjects for which the information is to be displayed.
SUBJECTS = *ALL
Information about all subjects is to be displayed.
SUBJECTS = *USER(...)
USER-IDENTIFICATION = *ALL
Information about all users is to be displayed.
USER-IDENTIFICATION = list-poss(20):<name 1..8>
Information about the specified users is to be displayed.
SUBJECTS = GROUP(...)
GROUP-IDENTIFICATION = *ALL
Information about all groups is to be displayed.
GROUP-IDENTIFICATION = list-poss(20):<name 1..8>
Information about the specified groups is to be displayed.
GROUP-IDENTIFICATION = *UNIVERSAL
Information about the group *UNIVERSAL is to be displayed.
INFORMATION =
The scope of the information to be displayed for each guard.
INFORMATION = *ADMISSIONS
Only the access conditions are to be displayed.
INFORMATION = *ALL
The guard attributes and the access conditions are to be displayed.
INFORMATION = *NAMES-ONLY
Only the names of the guards are to be displayed.
INFORMATION = *ATTRIBUTES
Only the guard attributes are to be displayed.
OUTPUT =
The destination to which the output is to be sent.
OUTPUT = *SYSOUT
The output is sent to the data display terminal if the command was entered in interactive (dialog) mode. In batch mode, the output destination depends on the specifications in the batch job.
OUTPUT = *SYSLST
The output is sent to SYSLST.
Output layout for INFORMATION=*ADMISSIONS
|
Output layout for INFORMATION=*ATTRIBUTES
|
Output layout for INFORMATION=*NAMES-ONLY
|
Explanation of the output
The format of the output is not guaranteed.
Conditions which start with IN result in TRUE if the condition is fulfilled
(in the example: TIME IN (<08:00>, <11:15>).
Conditions which start with EX result in TRUE if the condition is not fulfilled
(in the example: Week-Day EX (SA, SU)).
Privileges are abbreviated in the output, see table of privileges in section "Functional overview".
Command return codes
(SC2) | SC1 | Maincode | Meaning |
0 | CMD0001 | Command successfully executed | |
32 | PRO1001 | An internal error has occurred. A SERSLOG entry has been written for further analysis | |
64 | PRO1002 | Syntax error in the name of the guard | |
64 | PRO1007 | The specified guard does not exist | |
64 | PRO1012 | The specified catalog is not defined or not accessible | |
64 | PRO1013 | The pubset is not known to the GUARDS administration (the guards catalog was probably not opened at IMPORT-PUBSET) | |
64 | PRO1016 | Error in the MRS communication facility | |
64 | PRO1017 | Unknown user ID | |
64 | PRO1018 | The remote system is not available | |
64 | PRO1020 | No more memory space available | |
64 | PRO1021 | BCAM connection error | |
64 | PRO1022 | The BCAM connection has been interrupted | |
64 | PRO1023 | There is no guard matching the selection criteria | |
64 | PRO1024 | Use of the guard is not permitted | |
64 | PRO1028 | Incorrect guard type | |
64 | PRO1029 | GUARDS is not available on the remote system | |
64 | PRO1030 | User condition cannot be fulfilled in the guard | |
128 | PRO1009 | The specified guard is locked by another task | |
64 | OPS0002 | Output of S variables has been aborted | |
130 | OPS0001 | It was not possible to output the S variables | |
32 | CMD2009 | System error during output of S variables |
Output in S variables
The INFORMATION operand of this command is used to define which S variables are assigned values. The following can be specified for INFORMATION:
Notation in command | Meaning in table |
INFORMATION = ADMISSIONS | 1 |
INFORMATION = ALL | 2 |
INFORMATION = ATTRIBUTES | 3 |
INFORMATION = NAMES-ONLY | 4 |
Please note that the names of the S variables are not shown in alphabetical order in this table, as is otherwise usually the case. In order to provide a clearer overview, the general attributes of the guard are shown first, followed by the conditions for the subject types ALL-USERS, GROUP, OTHERS and USER.
Output information | Name of the S variable | T | Contents | Condition |
General attributes of the guard | ||||
Date on which the guard was created | var(*LIST).CRE-DATE | S | ’’ | 2,3 |
Time at which the guard was created | var(*LIST).CRE-TIME | S | ’’ | 2,3 |
Name of the guard | var(*LIST).GUARD-NAME | S | ’’ | 1,2,3,4 |
S | ’’ | 2,3,4 | ||
Date of the last modification | var(*LIST).LAST-MOD-DATE | S | ’’ | 2,3 |
Time of the last modification | var(*LIST).LAST-MOD-TIME | S | ’’ | 2,3 |
Utilization authorization for the | var(*LIST).SCOPE | S | ’’ | 2,3 |
Comment text on the guard | var(*LIST).USER-INFO | S | <c-string1..80> | 2 |
Pseudo subject ALL-USERS | ||||
Access permission | var(*LIST).ALL-USER.ADMIS | S | ’’ | 1,2 |
Calendar date as of which access | var(*LIST).ALL-USER.DATE(*LIST).FROM | S | ’’ | 1,2 |
Calendar date on which access to | var(*LIST).ALL-USER.DATE(*LIST).TO | S | <yyyy-mm-dd> | 1,2 |
How is access via the calendar | var(*LIST).ALL-USER.DATE-KIND | S | ’’ | 1,2 |
Privilege | var(*LIST).ALL-USER.PRIVIL(*LIST) | S | ’’ | 1,2 |
How is access via privileges | var(*LIST).ALL-USER.PRIVIL-KIND | S | ’’ | 1,2 |
Name of the program via which the | var(*LIST).ALL-USER.PROG(*LIST).F | S | ’’ | 1,2 |
Name of the library element | var(*LIST).ALL-USER.PROG(*LIST). | S | ’’ | 1,2 |
Name of the library containing the | var(*LIST).ALL-USER.PROG(*LIST). | S | ’’ | 1,2 |
Does the library element | var(*LIST).ALL-USER.PROG(*LIST). | S | ’’ | 1,2 |
Name of the library element | var(*LIST).ALL-USER.PROG(*LIST). | S | ’’ | 1,2 |
Name of the library containing the | var(*LIST).ALL-USER.PROG(*LIST).PHASE. | S | ’’ | 1,2 |
Does the library element | var(*LIST).ALL-USER.PROG(*LIST).PHASE. | S | ’’ | 1,2 |
Which values are assigned to the | var(*LIST).ALL-USER.PROG-CONTR | S | ’’ | 1,2 |
Time as of which access to the | var(*LIST).ALL-USER.TIME(*LIST).FROM | S | ’’ | 1,2 |
Time at which access to the object | var(*LIST).ALL-USER.TIME(*LIST).TO | S | ’’ | 1,2 |
How is access via the time of day | var(*LIST).ALL-USER.TIME-KIND | S | ’’ | 1,2 |
Day of the week on which access | var(*LIST).ALL-USER.WEEKDAY(*LIST) | S | ’’ | 1,2 |
How is access via the day of the | var(*LIST).ALL-USER.WEEKDAY-KIND | S | ’’ | 1,2 |
Subject type GROUP | ||||
Access permission for the user | var(*LIST).GROUP(*LIST).ADMIS | S | ’’ | 1,2 |
Calendar date as of which access | var(*LIST).GROUP(*LIST).DATE(*LIST). | S | ’’ | 1,2 |
Calendar date on which access to | var(*LIST).GROUP(*LIST).DATE(*LIST).TO | S | ’’ | 1,2 |
How is access via the calendar | var(*LIST).GROUP(*LIST).DATE-KIND | S | ’’ | 1,2 |
Group ID | var(*LIST).GROUP(*LIST).GROUP-ID | S | ’’ | 1,2 |
Privilege | var(*LIST).GROUP(*LIST).PRIVIL(*LIST) | S | ’’ | 1,2 |
How is access via privileges | var(*LIST).GROUP(*LIST).PRIVIL-KIND | S | ’’ | 1,2 |
Name of the program via which the | var(*LIST).GROUP(*LIST).PROG(*LIST).F | S | ’’ | 1,2 |
Name of the library element | var(*LIST).GROUP(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Name of the library containing the | var(*LIST).GROUP(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Does the library element | var(*LIST).GROUP(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Name of the library element | var(*LIST).GROUP(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Name of the library containing the | var(*LIST).GROUP(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Does the library element | var(*LIST).GROUP(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Which values are assigned to the | var(*LIST).GROUP(*LIST).PROG-CONTR | S | ’’ | 1,2 |
Time as of which access to the | var(*LIST).GROUP(*LIST).TIME(*LIST). | S | ’’ | 1,2 |
Time at which access to the object | var(*LIST).GROUP(*LIST).TIME(*LIST).TO | S | ’’ | 1,2 |
How is access via the time of day | var(*LIST).GROUP(*LIST).TIME-KIND | S | ’’ | 1,2 |
Day of the week on which access | var(*LIST).GROUP(*LIST).WEEKDAY(*LIST) | S | ’’ | 1,2 |
How is access via the day of the | var(*LIST).GROUP(*LIST).WEEKDAY-KIND | S | ’’ | 1,2 |
Subject type OTHERS | ||||
Access permission | var(*LIST).OTHERS.ADMIS | S | ’’ | 1,2 |
Calendar date as of which access | var(*LIST).OTHERS.DATE(*LIST).FROM | S | ’’ | 1,2 |
Calendar date on which access to | var(*LIST).OTHERS.DATE(*LIST).TO | S | ’’ | 1,2 |
How is access via the calendar | var(*LIST).OTHERS.DATE-KIND | S | ’’ | 1,2 |
Privilege | var(*LIST).OTHERS.PRIVIL(*LIST) | S | ’’ | 1,2 |
How is access via privileges | var(*LIST).OTHERS.PRIVIL-KIND | S | ’’ | 1,2 |
Name of the program via which the | var(*LIST).OTHERS.PROG(*LIST).F | S | ’’ | 1,2 |
Name of the library element | var(*LIST).OTHERS.PROG(*LIST). | S | ’’ | 1,2 |
Name of the library containing the | var(*LIST).OTHERS.PROG(*LIST). | S | ’’ | 1,2 |
Does the library element | var(*LIST).OTHERS.PROG(*LIST). | S | ’’ | 1,2 |
Name of the library element | var(*LIST).OTHERS.PROG(*LIST).PHASE. | S | ’’ | 1,2 |
Name of the library containing the | var(*LIST).OTHERS.PROG(*LIST).PHASE. | S | ’’ | 1,2 |
Does the library element | var(*LIST).OTHERS.PROG(*LIST).PHASE. | S | ’’ | 1,2 |
Which values are assigned to the | var(*LIST).OTHERS.PROG-CONTR | S | ’’ | 1,2 |
Time as of which access to the | var(*LIST).OTHERS.TIME(*LIST).FROM | S | ’’ | 1,2 |
Time at which access to the object | var(*LIST).OTHERS.TIME(*LIST).TO | S | ’’ | 1,2 |
How is access via the day of the | var(*LIST).OTHERS.TIME-KIND | S | ’’ | 1,2 |
Day of the week on which access | var(*LIST).OTHERS.WEEKDAY(*LIST) | S | ’’ | 1,2 |
How is access via the day of the | var(*LIST).OTHERS.WEEKDAY-KIND | S | ’’ | 1,2 |
Subject type USER | ||||
Access permission | var(*LIST).USER(*LIST).ADMIS | S | ’’ | 1,2 |
Calendar date as of which access | var(*LIST).USER(*LIST).DATE(*LIST).FROM | S | ’’ | 1,2 |
Calendar date on which access to | var(*LIST).USER(*LIST).DATE(*LIST).TO | S | ’’ | 1,2 |
How is access via the calendar | var(*LIST).USER(*LIST).DATE-KIND | S | ’’ | 1,2 |
Privilege | var(*LIST).USER(*LIST).PRIVIL(*LIST) | S | ’’ | 1,2 |
How is access via privileges | var(*LIST).USER(*LIST).PRIVIL-KIND | S | ’’ | 1,2 |
Name of the program via which the | var(*LIST).USER(*LIST).PROG(*LIST).F | S | ’’ | 1,2 |
Name of the library element | var(*LIST).USER(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Name of the library containing the | var(*LIST).USER(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Does the library element | var(*LIST).USER(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Name of the library element | var(*LIST).USER(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Name of the library containing the | var(*LIST).USER(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Does the library element | var(*LIST).USER(*LIST).PROG(*LIST). | S | ’’ | 1,2 |
Which values are assigned to the | var(*LIST).USER(*LIST).PROG-CONTR | S | ’’ | 1,2 |
Time as of which access to the | var(*LIST).USER(*LIST).TIME(*LIST).FROM | S | ’’ | 1,2 |
Time at which access to the object | var(*LIST).USER(*LIST).TIME(*LIST).TO | S | ’’ | 1,2 |
How is access via the time of day | var(*LIST).USER(*LIST).TIME-KIND | S | ’’ | 1,2 |
User ID | var(*LIST).USER(*LIST).USER-ID | S | ’’ | 1,2 |
Day of the week on which access | var(*LIST).USER(*LIST).WEEKDAY(*LIST) | S | ’’ | 1,2 |
How is access via the day of the | var(*LIST).USER(*LIST).WEEKDAY-KIND | S | ’’ | 1,2 |