Paul Gilmartin wrote:
On Tue, 5 Jun 2007 18:55:46 -0500, Joel C. Ewing wrote:
The default RACF behavior allows only a RACF SPECIAL user to issue the
ALU command to update a user profile. It is possible for ane
installation to explicitly grant users the authority to update specific
fields in their own user profile, but since the TSO logon panel
already provides (under normal circumstances) a route for the ordinary
user to update his logon proc, account number, and logon command in the
RACF USER TSO segment, it would be unlikely for an installation to
enable update of these fields via the ALU commend.
The case in point, and need to recover, demonstrates why such
authority for all users should be the default.
...
>
> -- gil
Even if that ALU capability were the default, do you really think the
average user would realize this is a RACF user profile issue, or have
any idea how to use the ALU command properly to fix this problem?
Especially if he can't get into TSO, and if this is something he
encounters maybe once in a decade? As far as I can remember, none of our
TSO users have ever encountered this specific problem in 22 years of
running MVS here, so this is unlikely to be a problem the typical user
has ever seen before.
You certainly don't want another ordinary TSO user who CAN get into TSO
to have the power to alter someone else's TSO segment, so if these
fields were only self-updatable the user with the problem would have to
get into the system by some route with which he in unaccustomed to issue
a command with which he is unfamiliar to fix the problem. In reality,
most users aren't going to waste their time on independent research in a
case like this when they can get quicker resolution by just asking
Technical Support for assistance.
Should a user hit this rare problem, the most likely sequence of events
is that the user will contact Technical Support for problem diagnosis
and resolution, at which point involving a RACF SPECIAL user to perform
the actual fix should at most be a minor additional delay.
J C Ewing
--
Joel C. Ewing, Fort Smith, AR [EMAIL PROTECTED]
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
