No M - Access Services menu seletion from the Primary Menu using ACF2

Document ID : KB000072845
Last Modified Date : 09/03/2018
Show Technical Document Details
Introduction:
After an upgrade to Solve:Access 5.0 using the Full security exit NMSAFF, the Primary menu does not display Option M - Access Services.
The previous release 4.0 was running ACF2 Full security exit through CCACF2FX with customization with ACF2 rules.
What is the reason of this error?
 
Background:
The Partial security exit through NMSAF and the Full security exit through NMSAFF are provided as standard security exit.
For this purpose, they are using SXPARMS or SXP* located in hlq.PARMLIB as configuration member and is also specified from RUNSYSIN through SXCTL DD.
The SXPARMS contains MODELGROUP Statement which can be configured to associate the security profile to a model.

MODELGROUP { saf.resource.name | * } modelname

Supplies an entry in a list of SAF resource names and associated model names. The parameter can
be repeated up to 20 times in the SXCTL file. The order in which the pairs of resource names and
model names are specified is the order in which the resource names are tested. Specifying a
resource name of * always matches (no SAF AUTH call is made).

 
Instructions:
This is an example of settings from ACF2 and model name:

The SXCTL must match ACF2 rule as follow:

ACF2

SEC1.RESOURCE.NET(SOLVE)
$KEY(SOLVE) TYPE(NET)
  KTDSS UID(UEXOKTDSS) ALLOW
  KFSOS UID(UEXOKFSOS) ALLOW
  KFCOV UID(UEXOKFCOV) ALLOW

SXCTL

RCLASS(NET)
MODELGROUP
  SOLVE.KTDSS ADMINS
  SOLVE.KFSOS HELPDESK
  SOLVE.KFCOV OPERATORS

STARTPROF ADMINS
..........
MAIFSMODELUSERID CICSSYS
..........
ENDPROF

STARTPROF HELPDESK
..........
MAIFSMODELUSERID UAHD
..........
ENDPROF

STARTPROF OPERATORS
.
MAIFSMODELUSERID OPSPORT
.
ENDPROF
 
Additional Information:
CA NetMaster Shared Content Library - 12.2  Security