An interesting idea and I like the simplicity part of it - but I've yet to meet a RACF admin willing to give me that kind of access to his/her database. But then to be fair, I won't let them muck around in my pond either. ;o) ddk
//////////////////////////////////////////// Not necessarily, though. The RACF administrator can delegate all the DFP segment authority to the storage administrators. Then you have the flexibility of using the DFP segments for the simple cases, but using ACS routines for more complex cases. Of course, then the storage administrators need to learn a little about RACF. -- Walt Farrell, CISSP IBM STSM, z/OS Security Design ************************************************************************************** This e-mail message and all attachments transmitted with it may contain legally privileged and/or confidential information intended solely for the use of the addressee(s). If the reader of this message is not the intended recipient, you are hereby notified that any reading, dissemination, distribution, copying, forwarding or other use of this message or its attachments is strictly prohibited. If you have received this message in error, please notify the sender immediately and delete this message and all copies and backups thereof. Thank you. ************************************************************************************** ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
