Multiple PERMITs within the same PROFILE.

Document ID : KB000113398
Last Modified Date : 07/09/2018
Show Technical Document Details
Issue:
Permits in the same profile and only profile on the user:

Rule#1 --> DSN(ABC) ACCESS(NONE)
Rule#2 --> DSN(ABCD) ACCESS(UPDATE)

If the dataset name is ABCDEF which rule will be used if the requested access level is UPDATE? 
Resolution:
The more specific PERMIT will be used. 

In the example you gave, the second PERMIT is more specific. 

Rule#1 --> DSN(ABC) ACCESS(NONE) 
Rule#2 --> DSN(ABCD) ACCESS(UPDATE) 

ABCD is more specific than ABC. 

This is documented in the doc at : 

https://docops.ca.com/ca-top-secret-for-z-os/16-0/en/using/resource-access-security-validation-algorithm/how-the-algorithm-determines-best-fit 

in the first bullet.