CFALIAS Parameters

You have to define some CFALIAS parameters to restrict a user's ability to define a file on your mainframe.

See the following table for the available CFALIAS parameters.
Parameter Description
USERID Defines the user ID that is associated with the file transfer.
This parameter can be used along with the NODE or IPADDR parameters to further qualify the CFALIAS matching scan.
Note: If the NODE and IPADDR parameters are not defined, then this parameter must be defined.

You can specify a special user ID called DEFAULT. With this setting, CFALIAS scanning detects a match for the user ID in this CFALIAS configuration entry. If this parameter is not entered, no checking is performed on the user ID for this entry.

NODE Defines the node that is associated with the file transfer.
Nodes are defined within the platform server CONFIG DD statement. This parameter can be used along with the USERID parameter to further qualify the CFALIAS matching scan.
Note:
  • If the USERID and IPADDR parameters are not defined, then this parameter must be defined.
  • This parameter is mutually exclusive with the IPADDR parameter.

You can specify a special node called DEFAULT. With this setting, CFALIAS scanning detects a match for the node in this CFALIAS configuration entry. If this parameter is not entered, no checking is performed on the node for this entry.

IPADDR Defines the IP address that is associated with the file transfer.
This parameter can be used along with the USERID parameter to further qualify the CFALIAS matching scan.
Note:
  • If the USERID and NODE parameters are not defined, then this parameter must be defined.
  • This parameter is mutually exclusive with the NODE parameter.
If this parameter is not entered, no checking is performed on the IP address for this entry.
TYPE Defines whether the processing is for send or receive requests.

This parameter is relative to the platform server for z/OS.

The valid values are:
  • SEND: an entry is only matched if the platform server is sending a file.
  • RECEIVE: an entry is only matched if the platform server is receiving a file.
  • BOTH: an entry is matched if the platform server is sending or receiving a file.
FILE Defines the actual file name on the z/OS system.
The file name is translated to upper case unless the file is an HFS file. When specified, both FILE and ALIAS must be defined.
Note: FILE and ALIAS are mutually exclusive with the ALLOW parameter.
ALIAS Defines the file name that the user sends.
This file name is translated to upper case, and is therefore not case sensitive. When specified, both FILE and ALIAS must be defined.
Note: FILE and ALIAS are mutually exclusive with the ALLOW parameter.
ALLOW Defines whether the user is authorized to execute certain functions.
The valid values are:
  • YES: the user is authorized to use an actual file name in a file transfer request. CFALIAS processing is not performed for this USERID and NODE/IPADDR combination.
  • NO: the user is not authorized to perform file transfer operations. The file transfer request for this USERID and NODE/IPADDR combination is rejected.
Note: This parameter is mutually exclusive with the FILE and ALIAS parameters.