Crispin Hugo Hi Chaps,
I have a RACF profile defined for the master catalog CATALOG.Z17.MASTER which has a UACC of READ with group TSG in the access list with ALTER. The profile is owned by group TSG. The profile is defined as Generic although it is the fully qualified name. Group SYS1 is not mentioned at all in the profile. It seems however that any userid that is in group SYS1 can still UPDATE the master catalog. For example a DEFINE ALIAS works from any userid or task associated with a group SYS1 user. Is this set up as a standard? I can't find anything obvious in the documentation. Thanks ________________________________________________________________________ This email has been scanned for all known viruses by the MessageLabs Email Security Service and the Macro 4 plc internal virus protection system. ________________________________________________________________________ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
