Perhaps waking the horse. The one function available directly using
ADRDSSU not available via other utilities that might be useful in an
application context is deleting dataset via using wildcard selection.
  IDCAMS will only do one level. ADRDSSU COPY Dsname(s) to a DUMMY file
with the DELETE operand allows full flexibility.

Dave Gibney
Information Technology Services
Washington State University


> -----Original Message-----
> From: IBM Mainframe Discussion List [mailto:[email protected]] On
> Behalf Of Ted MacNEIL
> Sent: Wednesday, May 06, 2009 11:23 AM
> To: [email protected]
> Subject: Re: ADRDSSU protection
> 
> At the risk of flogging a dead horse, I truly believe in the minimum
> access to do the job, and separation of duties.
> 
> If you have a storage administrator, they should be the only ones with
> access to the storage administration tools.
> Not a sysprog, and definitely not application types.
> 
> Yes, you can set up emergency procedures to pass the hammer to another
> person, or department (group); ensure that they know how to use it, or
> you might find a lot of smashed thumbs.
> 
> I should have realised, since this was a security-based discussion,
> there was going to be a lot of opinions, arguments, and snide
comments!
> 
> So, unless something truly novel comes up, I'm not going to continue
> with this thread.
> 
> -
> Too busy driving to stop for gas!
> 
> ----------------------------------------------------------------------
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [email protected] with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to