""Ted MacNEIL"" <[EMAIL PROTECTED]> wrote in message
news:<[EMAIL PROTECTED]
-cell00.bisx.prod.on.blackberry>...
> >> Why does RACF not support rules restricting the set of users who
may ENQ
> >> on protected data set names?
> 
> 
> >It does: via the restriction who can read or update the dataset,
ain't it?
> 
> No. It does not. You can grab a DSN with old or share, without opening
it.
> The read/update is not checked until you open it.
> 
> So, if you never open it, you can still lock it up.
> 

That's right, but in 99.9% of the situations they are the same, you ENQ
a dataset because you are going to open it, if you are not allowed to
open it, you will get one 913 abend and then never do it again or have
your autorizations changed. Only in 0.1 % of the situations you might
have something doing an ENQ without intending to Open and causing
contention and this also being intentionally and not desired by your
colleagues.

99.9% of the situations the OP is referring to are users ENQ'ing a
dataset legally, authorized by RACF at Open time.

1% of the answers refer to this situation (call user, cancel user) and
99% of the answers elaborates the 0.1% of the situations that only will
arise when you let a number of sysprogs play in a sandbox and not in the
real world. So the majority of this thread is highly academically and
theoretically. Let's go and do some useful work.

Kees.
**********************************************************************
For information, services and offers, please visit our web site:
http://www.klm.com. This e-mail and any attachment may contain
confidential and privileged material intended for the addressee
only. If you are not the addressee, you are notified that no part
of the e-mail or any attachment may be disclosed, copied or
distributed, and that any other action related to this e-mail or
attachment is strictly prohibited, and may be unlawful. If you have
received this e-mail by error, please notify the sender immediately
by return e-mail, and delete this message. Koninklijke Luchtvaart
Maatschappij NV (KLM), its subsidiaries and/or its employees shall
not be liable for the incorrect or incomplete transmission of this
e-mail or any attachments, nor responsible for any delay in
receipt.
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal
Dutch Airlines) is registered in Amstelveen, The Netherlands, with
registered number 33014286 
**********************************************************************

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to