Paul Gilmartin pisze:
[...]
But note that there are no permissions peculiar to AMASPZAP; all
needed security is provided by protecting data sets and VTOCs.
What can you do with AMASPZAP? You can ...ZAP data. This is powerful
utility, but quite limited in terms of functions. You modify data and
that's why data is protected. BTW: DASDVOL profile had to be used,
because "standard DATASET control" was not able to control some resources.
Another example would be ICKDSF. In this case you also protect resources
FIRST. DASDVOL class profiles are checked. However you can further
control use of specific commands/functions like ANALYZE or INSPECT.
Sometimes it is enough to use different access levels (READ, UPDATE,
CONTROL), but sometimes is it more flexible to use another class for the
functions. In case of ICKDSF it is FACILITY class and profiles
STGADMIN.ICK.function. For DITTO it is FACILITY class and profiles
DITTO.** (more complex than ICKDSF example). Those FACILITY profiles are
*addition* to regular data protection. They do not replace data profiles
(DATASET, DASDVOL, etc.) but complement the security, provide better
granularity. Maybe such granularity is excessive and rarely used - but
it doesn't hurt to have it and not use it (today).
Of course in every case we should know the meaning of the profiles and I
believe that the GIM.** profiles will be documented. It does not
contradict with the APAR statement - the risk details can be still obscured.
BTW: I bet the case is very bizarre case and it does not affect majority
of us, BUT the APAR officially falls into category "integrity" and gets
all the attributes of secrecy. I consider it as SPE (Small Programming
Enhancement) with disputable qualification.
--
Radoslaw Skorupka
Lodz, Poland
--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl
Sąd Rejonowy dla m. st. Warszawy
XII Wydział Gospodarczy Krajowego Rejestru Sądowego,
nr rejestru przedsiębiorców KRS 0000025237
NIP: 526-021-50-88
Według stanu na dzień 01.01.2009 r. kapitał zakładowy BRE Banku SA (w całości
wpłacony) wynosi 118.763.528 złotych. W związku z realizacją warunkowego
podwyższenia kapitału zakładowego, na podstawie uchwały XXI WZ z dnia 16 marca
2008r., oraz uchwały XVI NWZ z dnia 27 października 2008r., może ulec
podwyższeniu do kwoty 123.763.528 zł. Akcje w podwyższonym kapitale zakładowym
BRE Banku SA będą w całości opłacone.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
