I have a RACF profile defined for the master catalog CATALOG.Z17.MASTER which has a UACC of READ with group TSG in the access list with ALTER. The profile is owned by group TSG. The profile is defined as Generic although it is the fully qualified name. Group SYS1 is not mentioned at all in the profile.
It seems however that any userid that is in group SYS1 can still UPDATE the master catalog. For example a DEFINE ALIAS works from any userid or task associated with a group SYS1 user. Is this set up as a standard? I can't find anything obvious in the documentation. Thanks Crispin Hugo Systems Programmer, Macro 4 http://www.macro4.com/ Macro 4 plc, The Orangery, Turners Hill Road, Worth, Crawley, RH10 4SS Direct Line: +44 (0)1293 872121 Switchboard: +44 (0) 1293 872000 Fax: +44 (0) 1293 872001 This message contains confidential information and is intended only for the individual named. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. If verification is required please request a hard-copy version. This message is provided for informational purposes and should not be construed as a solicitation, offer or acceptance of any offer. ________________________________________________________________________ This email has been scanned for all known viruses by the MessageLabs Email Security Service and the Macro 4 plc internal virus protection system. ________________________________________________________________________ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
