Martin, 
If a persons job function requires that they be able to use ISPF and edit a
file that requires 128M of virtual storage, then they should have access to
that much storage.  If their job functions requires that they have update
access to SYS1.PARMLIB, then the should have it.  However, giving them
update access to the FILE that requires 128M of virtual storage to edit, but
limiting the user to 32M of virtual storage will not allow them to perform
there job function.  I don't believe that anyone is saying don't have
limits, just that the limits should be so restrictive that the computer
doesn't get used.
Wayne Driscoll
Product Developer
Western Metal Supply
NOTE: All opinions are strictly my own.
  

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf
Of Martin Kline
Sent: Friday, October 28, 2005 9:37 AM
To: [email protected]
Subject: Re: Allowing Joe User into TSO

> Your confusion is due to an unfortunate use of the word "resource" in 
> two wholly-different contexts.

On the contrary, I am not confused at all. Clearly, users should be
prevented from deleting datasets they shouldn't delete. However, who's to
say Joe user shouldn't delete dataset JOE.yyy.zzz? Is it a requirement of
the job?

Likewise, who's to say Joe user shouldn't allocate 100Gb of virtual memory
to load a table? Is it a requirement of the job?

Should the approach be to protect all datasets, and require every user to
get authorization before accessing them? Won't this interfere with their
ability to do their jobs?

What about memory? Shouldn't excessive memory requests be restricted, and
require authorization as well? Would that interfere with the ability of
users to do their jobs? Is it any worse than setting up dataset protection?

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to