On Thu, 14 Oct 2010 20:43:31 +0200, Lindy Mayfield <[email protected]> wrote:
>This has been a curiosity of mine of late. Why are on some systems, for example DELETE and LISTCAT authorized in IKJTSOxx? And some systems they aren't? I don't know the answer to LISTCAT. For DELETE, some operations that DELETE performs require APF-authorization, but most do not. IBM has never (as far as I know) shipped the default IKJTSOxx with DELETE in it, so it's probably only in IKJTSOxx on those systems where the users make use of those authorized functions of DELETE from TSO. If you need those functions, and do not have DELETE in IKJTSOxx, then you would have to run IDCAMS in batch to perform the functions. (And in response to another message, those functions of DELETE, and authorized functions of some other IDCAMS commands, are (I believe) why IDCAMS runs authorized.) -- Walt Farrell IBM STSM, z/OS Security Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
