GUARD - Guard protection for files / library elements

ONXGUARD  [%name|%? [,JRS=jrfile]] [R=guard|*NONE|*SAME] [,W=guard|*NONE|*SAME] [,E=guard|*NONE|*SAME]

The files/PLAM library elements marked with X will be provided with Guard protection. If no parameters are specified, they will be requested via a mask (see above).

%name The parameter values for the ONXGUARD Variable Action will be taken from the specified parameter set. Saving a parameter set can be done by entering the CFS command SPGUARD %name.

%? All relevant parameter sets will be displayed in a list, from which one may be selected by marking it.

JRS=jrfile Name of the JRSAVE file in which the parameter set is saved.

Standard: CFS.JRSAVE.xxxx. For further information, see page 27-.

R=guard Read access to the data object is protected by a Guard of the specified name. Like a file, a Guard can possess a PVS-id, a userid and a name. The name is restricted to 8 characters.

R=*NONE File: Read access is protected by an empty Guard, and is thus not allowed.

PLAM Element: Read access is monitored neither by a Guard, nor by Basic Access Control (BACL).

R=*SAME The read access attributes of the data object are not changed.

W=guard Write access to the data object is protected by a Guard of the specified name. Like a file, a Guard can possess a PVS-id, a userid and a name. The name is restricted to 8 characters.

W=*NONE File: Write access is protected by an empty Guard, and is thus not allowed.

PLAM Element: Write access is monitored neither by a Guard, nor by Basic Access Control (BACL).

W=*SAME The write access attributes of the data object are not changed.

E=guard Execution access to the data object is protected by a Guard of the specified name. Like a file, a Guard can possess a PVS-id, a userid and a name. The name is restricted to 8 characters.

E=*NONE File: Execution access is protected by an empty Guard, and is thus not allowed.

PLAM Element: Execution access is monitored neither by a Guard, nor by Basic Access Control (BACL).

E=*SAME The execution access attributes of the data object are not changed.

Notes:

For files the following is valid: If the value *NONE is entered for all three access types (R/W/E), Guard access control is disabled completely. The file is then protected only by SHARE=YES|NO,ACCESS=READ|WRITE. The same effect can be achieved by entering the SGN (Set Guards None) Action Code.

When protecting PLAM elements with the ONXGUARD Variable Action, the existence of the specified Guards are not checked. If access of a particular type, e.g. R (Read) is protected with a non-existent Guard, then that access (e.g. Read) will be prohibited to all users until a Guard with the specified name is created.

Example:

ON&GUARD R=:C:$TSOS.READG,W=$TSOS.WRITEG,E=$TSOS.EXECG

All files in the file list will be protected with the following Guards:

Read access: Guard :C:$TSOS.READG

Write access: Guard $TSOS.WRITEG

Execute access: Guard $TSOS.EXECG