Wayne Driscoll wrote:
Radoslaw,
I agree, the user needs sufficient authority to perform their job
function, no less, and absolutely no more. If the job requires that the
user be able to re-init a PDS(/E), but other than that they have no need
to delete/define, then I would say give them UPDATE on the dataset, make
it a PDS/E, so COMPRESS is no longer an issue. The reason's that I
don't like ALTER when not necessary - For a generic profile, they have
ALTER auth on more than just this one dataset. For a discrete profile,
they would have the ability to issue the ALTDSD command against the
profile.
Wayne,
I fully agree with your point about discrete profiles.
I don't like discret profiles at all. However I see nothing wrong in
giving ALTER. I often observe some kind of fear for giving ALTER. IMHO
unfounded fear.
What's worng with having ALTER instead of UPDATE ?
Having "U" user can destroy dataset's content, i.e. delete all members.
Having "A" user can compress PDS (Mark, I'll check it ASAP, to be sure).
Also delete and reallocate dataset. Usually (exceptions could apply,
YMMV!), it is no breach in security. No information is exposed.
Regarding scope of generic profile - it shouldn't be to wide. Dot.
It the profile is "too generic", then it is good reason to make more
profiles, to narrow the scope.
Regards
--
Radoslaw Skorupka
Lodz, Poland
--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl
Sd Rejonowy dla m. st. Warszawy
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego,
nr rejestru przedsibiorców KRS 0000025237
NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2007 r. kapita zakadowy BRE Banku SA (w caoci
opacony) wynosi 118.064.140 z. W zwizku z realizacj warunkowego
podwyszenia kapitau zakadowego, na podstawie uchwa XVI WZ z dnia 21.05.2003
r., kapita zakadowy BRE Banku SA moe ulec podwyszeniu do kwoty 118.760.528
z. Akcje w podwyszonym kapitale zakadowym bd w caoci opacone.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
