On Thu, 14 Jul 2011 14:37:29 -0400, Mark Jacobs <[email protected]> 
wrote:

>I asked IBM specifically whether the then new SAF profiles were used
>while using the query functions in the SMP/E ISPF interface and their
>answer was no.
>

(I hate mixing top posting and bottom posting, so I snipped the prior
context ... sorry.  Also changed the subject).

If that is true, it sounds inconsistent with what the enhancement is
doing (unless things like LIST and REPORT aren't protected).  So 
you protect the LIST command, but don't specifically protect the
ISPF libraries because the HLQs are SYS1 and everyone has read
access to SYS1.  Then someone can just execute the ISPF interface
and do the equivalent of LIST.  

Mark
--
Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS       
mailto:[email protected]                                        
Mark's MVS Utilities: http://www.mzelden.com/mvsutil.html 
Systems Programming expert at http://expertanswercenter.techtarget.com/

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to