Wayne Driscoll wrote:
Radoslaw,
There is a simple solution to resolving the -stop db2 issue. Don't allow
people who have no business accessing a console, be it via a real console,
an EMCS console (including SDSF) or any other approach.
Wayne,
it is a joke, yes ?
Otherwise:
I'm aware that I can disallow people to use any console. I can also
disallow them to use any mainframe connection, and - if there is no
business case - I can switch off the mainframe - in that case everything
will be very secure.
We call it "binary security". You have access to all or nothing. Simple
rule.
But seriously: I have business reasons to allow some folks to issue
DISPLAY (and some MODIFY) commands. I can filter the commands very
precisely, for example I can allow to F CICSA, but not CICSB. However
*every* person having such (limited) access is also able to blow up our
DB2 subsystem.
Regards
--
Radoslaw Skorupka
Lodz, Poland
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
