Searching by profile name

The following parameters can be used for selections based on the profile name. They are mutually exclusive within a single SELECT/EXCLUDE clause.
ACL(limitedACLsubselectclause)
Select on a combination of values in a single ACL repeat group entry. For the syntax of a 'subselect clause' and the fields generally supported in one, refer to DEFINE. The ACL subselect fields USER and GROUP are not supported for SELECT and EXCLUDE--use ID instead (when the id is encountered on the access list, the user or group profile it is to be matched against might not have been read yet, so the type is generally unknown).
BESTMATCH=name
Select the best matching profile as found with MATCH. This parameter performs the same function as the MATCH parameter but only shows the best matching profile or profiles. This profile is the one that would end up on top if the result of a MATCH had been sorted on SEARCHKEY. The following restrictions apply to the usage of the BESTMATCH parameter:
  • It cannot be used in combination with the PROFILE / KEY, MASK / FILTER, or MATCH parameter.
  • It cannot be used in an explicit or an implicit OR (multiple select statements).
  • It cannot be used as a target for a LIKELIST.
  • It cannot be used for exclusion.

BESTMATCH examines only the RACF database (or UNLOAD); it does not check whether a data set actually exists on a volume, and it does not check for any RACF-indicated bit in VTOCs. If you have multiple DATASET profiles for the same data set name (think of discrete profiles with different volume serials), these profiles are all selected as BESTMATCH.

See MATCH keyword.

CUSTOM_DATA(CUSTOM_DATAsubselectclause)
This parameter selects on the combination of key, type, and value in a single custom field entry. For the syntax of the CUSTOM_DATA(CUSTOM_DATAsubselectclause) and the fields supported in one, see DEFINE.
MASK= mask
FILTER=mask
A mask for the profile key. Use %, *, and .** (enhanced generic naming). The filter is always interpreted as enhanced generic, independent of the RACF database setting for EGN. If you specify a generic profile key here, this value matches generic and discrete profiles that are covered by this name. The meaning of a single * depends on the entity type.
  • For data sets, a single * matches a qualifier with a maximum of 8 characters.
  • For general resource profiles, a single * at the end of a FILTER or MASK statement, selects only a single qualifier (while in RACF it means any number of profiles).

The mask value can be specified with or without quotation marks. If no quotation marks are specified, the match processing is not case sensitive. If single, double or back quotation marks are specified, the match processing is case sensitive.

There is one extension to EGN matching. A single asterisk can also be used to match the first part of a qualifier. For example, **.*ABC.** finds qualifiers ending in ABC anywhere in the field, except for the first qualifier.

A special form of filter is a specification like *string*, which performs a case-insensitive search for the string anywhere in the field.

MATCH= name
Select all profiles that match the specified resource name. The result includes both discrete and generic profiles. However, the indicated bit and the volume serial numbers are ignored, so for DATASET profiles the result is only an approximation of the search performed by RACF. The MATCH keyword is useful to determine the profiles that protect a resource if another profile is deleted. For grouping profiles, the match is on the member list of the grouping profile.

The following syntax rules apply to the MATCH specification.

  • For case-sensitive matching, specify the name in quotation marks (single, double, or backward). If case is not significant, specify the name without quotation marks.
  • If a CLASS keyword is specified for a member class, the grouping class is automatically included. This syntax allows selection of all profiles that can protect a CICS transaction. See Examples - SELECT and EXCLUDE statements.
  • If the MATCH and CLASS keywords are specified together, make them the first keywords in the SELECT or EXCLUDE statement or the WHERE clause.
  • Specify the SEARCHKEY output field to sort the resulting profile names in order of best match.

See BESTMATCH keyword.

PROFILE= name
PROFILE=( name, name, ...)
KEY=name
KEY=(name, name)
Selects a specific profile name. If you specify generic characters, the profile searched has exactly the key specified. Unlike other fields where generic characters imply a pattern match, generic characters for the KEY field are treated literally. To match more than one profile, you must use one of the following key words: MASK, FILTER, MATCH, or BESTMATCH. Use quotation marks (double or left) around the profile name, if it contains lowercase, blanks, commas, or other special characters (like /*). Names specified without quotation marks are converted to uppercase and only match uppercase profiles. Names specified in quotation marks or a list of names, even when the list consists of only one name, are interpreted to be of type T for text. The comparison of these values is not case sensitive. If you want the comparison to be case sensitive, specify the name as type C, 'name'C for example.
USR(USRsubselectclause)
Select on a combination of values in a single USR repeat group entry. For the syntax of a subselect clause and its supported fields, see DEFINE.