On Wed, 5 Mar 2014 19:05:52 +0100, jan de decker <[email protected]> wrote:

>Hi list,
>
>I am building a small web application that interfaces with RACF.
>
>On the client side I only have the IBM default supplied classes.
>
>I want validate as much as possible on the client before sending it to the
>server.
>
>For the moment I have the following checks:
>
>- For all classes, never allowed is:
>
>     triple '*'
>     2 times '**'
>      no dot before '**'
>     '*' must be followed by a dot, an second '*' or must be the end of the
>resource name
>
>- For the DATASET class:
>
>     A qualifier starts with a number
>     A qualifier is longer than 8 characters
>     A warning for a single level qualifier resource name
>
>- For the other IBM default ones including DATASET:
>
>     First, Other and Maxlnth are checked
>
>Anybody any corrections or supplementary checks I could add?
>
>Any reaction would be greatly appreciated.

Resources (the objects that users access, and applications protect) never have 
names that contain * (or % or &) in them, Jan.

RACF profile names may have those characters, but resources don't. So to really 
answer your question I would need to know for sure which you're talking about, 
and what you're doing with them.

-- 
Walt

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to