Your Browser is not longer supported

Please use Google Chrome, Mozilla Firefox or Microsoft Edge to view the page correctly
Loading...

{{viewport.spaceProperty.prod}}

SHOW-GUARD-ATTRIBUTES Display guard attributes

Domain:

SECURITY-ADMINISTRATION

Privileges:

STD-PROCESSING, GUARD-ADMINISTRATION

This command displays the following information:

  • the name of the guard

  • the SCOPE attribute of the guard (USR, GRP or SYS)

  • the type of guard

  • the creation date

  • the date of the last modification

  • a comment text.

A guard is displayed only to authorized users, namely the owner or a guard administrator. Since a guard administrator is the owner of all guards, he/she can also display all guards. Other users are shown information about a guard only if this is permitted by the SCOPE attribute of the guard..

SHOW-GUARD-ATTRIBUTES

GUARD-NAME = * / <filename 1..24 without-gen-vers with-wild(40)>

,SELECT = *ALL / *BY-ATTRIBUTES(...)


*BY-ATTRIBUTES(...)



|

SCOPE = *ANY / list-poss(3): *USER-ID / *USER-GROUP / *HOST-SYSTEM



|

,TYPE = *ANY / <c-string 1..8>

,INFORMATION = *ALL / *NAMES-ONLY

,OUTPUT = list-poss(2): *SYSOUT / *SYSLST

GUARD-NAME = * / <filename 1..24 without-gen-vers-with-wild(40)>
Name of the guard whose attributes are to be displayed. The name may contain wildcards. Its length without wildcards, catalog ID and user ID must not exceed 8 characters. 

Only the guard administrator may specify wildcards in the user ID.

The specification of the system default ID in the guard name, e.g. $<filename> or $.<filename>, is not supported.

SELECT =
Specifies which guards are to be displayed.

SELECT = *ALL
All guards selected by the specification for GUARD-NAME in this command are to be displayed. If a partially qualified guard name or a guard name containing wildcards is specified, several guards may match this selection.

SELECT = *BY-ATTRIBUTES(...)
The output is to be restricted to match the following criteria.

SCOPE =
Selection is performed on the basis of the SCOPE attribute.

SCOPE = *ANY
The output is not restricted.

SCOPE = list-poss(3): *USER-ID / *USER-GROUP / *HOST-SYSTEM
Guards with the specified scope are selected for output. The scope was specified in the definition. The SCOPE selection operand is evaluated only if the caller is the guard owner or the guard administrator.

TYPE =
Selection is performed on the basis of the guard types.

TYPE = *ANY
No restrictions on output.

TYPE = <c-string 1..8>
Only guards of the specified type are output. The selective output of guards of type UNDEF is not supported.

INFORMATION =
This defines the amount of information to be output.

INFORMATION = *ALL
All attributes of the guard are output.

INFORMATION = *NAMES-ONLY
Only the name of the guard is output.

OUTPUT =
Destination for the output.

OUTPUT = *SYSOUT
The output is sent to the data display terminal if the command was entered in dialog (interactive) mode. In batch mode, the destination depends on the specifications in the batch job.

OUTPUT = *SYSLST
The output is sent to SYSLST.

Command return codes

(SC2)

SC1

Maincode

Meaning


0

CMD0001

Command successfully executed


32

PRO1001

An internal error has occurred. A SERSLOG entry has been written for further analysis


64

PRO1002

Syntax error in the name of the guard


64

PRO1007

The specified guard does not exist


128

PRO1009

The specified guard is locked by another task


64

PRO1012

The specified catalog is not defined or not accessible


64

PRO1013

The pubset is not known to the GUARDS administration (the guards catalog was probably not opened at IMPORT-PUBSET)


64

PRO1016

Error in the MRS communication facility


64

PRO1017

Unknown user ID


64

PRO1018

The remote system is not available


64

PRO1020

No more memory space available


64

PRO1021

BCAM connection error


64

PRO1022

The BCAM connection has been interrupted


64

PRO1023

There is no guard matching the selection criteria


64

PRO1024

Use of the guard is not permitted


64

PRO1029

GUARDS is not available on the remote system


128

PRO1036

The guards catalog is locked


64

OPS0002

Output of S variables has been aborted


130

OPS0001

It was not possible to output the S variables


32

CMD2009

System error during output of S variables

Example


/show-guard-attributes

Guard name         Scope   Type      Creation Date       LastMod Date
------------------------------------------------------------------------------

:N:$GUARDDOC.EXAGUARD    USR  STDAC    2017-04-29/13:11:21 2017-05-13/13:24:39
:N:$GUARDDOC.GUARDEXA    GRP  STDAC    2017-04-29/10:52:28 2017-04-29/11:07:06
                         GUARD FOR ACCESS CONTROL OF ALL GROUP MEMBERS
:N:$GUARDDOC.SECGUARD    SYS  STDAC    2017-04-27/11:32:38 2017-04-27/13:35:04
                         EXAMPLE GUARD
:N:$GUARDDOC.XYZGUARD    SYS  UNDEF    2017-04-28/13:42:19 2017-04-02/09:16:51
------------------------------------------------------------------------------

Guards selected: 4                                              End of display

The format of the output is not guaranteed.


Output in S variables

Output information

Name of the S variable

T

Contents

Condition

Date on which the guard was created

var(*LIST).CRE-DATE

S

<yyyy-mm-dd>

INF=*ALL

Time at which the guard was created

var(*LIST).CRE-TIME

S

<hh:mm:ss>

INF=*ALL

Name of the guard

var(*LIST).GUARD-NAME

S

<filename 1..40>
<part.-filename 2..40>

INF=ALL/*NA
MES-ONLY

Date of the last modification

var(*LIST).LAST-MOD-DATE

S

<yyyy-mm-dd>

INF=*ALL

Time of the last modification

var(*LIST).LAST-MOD-TIME

S

<hh:mm:ss>

INF=*ALL

User group which is allowed to use
the guard to protect its objects
*HOST-SYS: anyone may use the
guard
*USER-GROUP: members of the
user group of the owner may use
the guard
*USER-ID: only the user may use
the guard

var(*LIST).SCOPE

S

*HOST-SYS
*USER-GROUP
*USER-ID

INF=*ALL

Type of the guard

var(*LIST).TYPE

S

*COOWNERP
*DEFAULTP
*DEFPATTR
*DEFPUID
*STDAC
*UNDEF

INF=*ALL

Comment text on the guard

var(*LIST).USER-INFO

S

<c-string1..80>

INF=*ALL