Determining RACF protection

Although multiple generic profiles can match a general resource name, only the most specific profile actually protects it. For example, AB.CD*, AB.CD.**, and AB.**.CD all match the general resource name AB.CD, but AB.CD.** protects the resource.

The best way to determine which profile is protecting a given resource is to use one of the list commands.

To find out what profile is protecting a general resource, enter the RLIST command:
RLIST class-name resource-name
which looks for a discrete profile. If none is found, and generic profile checking is in effect for the class, the generic profile which protects the resource is displayed.
To find out what profile is protecting your data set, enter:
LISTDSD DA('data-set-name')
which looks for a discrete profile. If none is found, and generic profile checking is in effect for the DATASET class, enter:
LISTDSD DA('data-set-name') GENERIC
which looks for a generic profile.
The rest of the appendix discusses the rules governing:
  • Profile names for data sets
  • Profile names for general resources.