On Thu, 1 May 2008 10:19:46 -0500, Darth Keller <[EMAIL PROTECTED]>
wrote:

>One thing to keep in mind is that by giving control over to the DFP
>segment, you're generally depending on a RACF adminstrator to provide your
>values.  

Not necessarily, though.  The RACF administrator can delegate all the DFP
segment authority to the storage administrators.  Then you have the
flexibility of using the DFP segments for the simple cases, but using ACS
routines for more complex cases.  Of course, then the storage administrators
need to learn a little about RACF.

-- 
  Walt Farrell, CISSP
  IBM STSM, z/OS Security Design

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to