--------------------------<snip>--------------------
RACF people don't like to grant generic READ permission to all users.
Why not? What's the harm?
-------------------------<unsnip>------------------------------
I agree. Some datasets should be granted generic READ access, or even
GLOBAL READ access. The various ISPF datasets, like panels and
skeletons, come to mind as excellent examples. Sometimes efficient
operation is more important than having a tight lock on security,
especially if it's affecting a large community of users.
And you'll find that judicious use of the GLOBAL DATASET profile can
considerably reduce the I/O activity on the RACF database and also
reduce some of the huge volume of SMF data that's created in a
medium-to-large shop.
And even if you need a specific profile for a group of datasets, I can
think of no good reason not to use GENERIC profiles. Generics and GLOBAL
profiles are wonderful things for RACF efficiency.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
