On Fri, 2 Apr 2010 10:41:36 +0000, Bob Shannon <[email protected]>
wrote:

>We applied the APAR. We protect the SMP data. I'm sort of baffled why IBM
felt SAF support was necessary for SMPE.
>
>Since we are a development shop in which dozens of people use SMPE, we
simply set the access to UACC(READ) which gives everyone access to all of
the SMP/E commands.
>

It's not necessary, but I can "stretch" and see the case where a shop might
want to let an ID or group have RECEIVE authority for example, but
not let them to do an APPLY or not let them perform admin functions.  Perhaps
a production userid that does RECEIVE ORDER via a job scheduler on a
nightly or weekly basis. 

For query only, the CSI can simply be protected from update via 
RACF data set profiles.

I'd be mildly curious to know where the requirement came from.  

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS       
mailto:[email protected]                                          
Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to