I could damage the catalog, perhaps as easily as adding datasets until I overflow it. Perhaps not integrity as in ability to upgrade my authority, but certainly a potential DOS and a threat to system stability.
> -----Original Message----- > From: IBM Mainframe Discussion List <[email protected]> On > Behalf Of Lennie Dymoke-Bradshaw > Sent: Thursday, September 17, 2020 2:04 AM > To: [email protected] > Subject: Re: EXTERNAL EMAIL: How get a user to use his own catalog rather > than master? > > Dave, > > Sorry, but I actually disagree with Master catalog access being an integrity > issue. > > I would classify it as a security issue rather than an integrity issue. > The normal controls on the operating system are working correctly and are > not being bypassed, so I don't see that as an integrity issue. > > > Lennie Dymoke-Bradshaw > Consultant working on contract for BMC mainframe Services by RSM Partners > ‘Dance like no one is watching. Encrypt like everyone is.’ > > -----Original Message----- > From: IBM Mainframe Discussion List <[email protected]> On > Behalf Of Gibney, David Allen > Sent: 17 September 2020 02:23 > To: [email protected] > Subject: Re: EXTERNAL EMAIL: How get a user to use his own catalog rather > than master? > > A normal user with authority to update the master catalog is a potential > system integrity concern. > > > -----Original Message----- > > From: IBM Mainframe Discussion List <[email protected]> On > > Behalf Of CM Poncelet > > Sent: Wednesday, September 16, 2020 6:00 PM > > To: [email protected] > > Subject: Re: EXTERNAL EMAIL: How get a user to use his own catalog > > rather than master? > > > > In short-speak, yes. A user can use his own catalog rather than the > > master catalog, howbeit via the MCAT's then containing an entry > > pointing at the user's logon ID as an hlq (or similar) in the user's UCAT. > > Anything can be done with a bit of frigging around. But the question > > is, why and is it worth it? > > > > BTW Yes, I agree that all system changes should always be done in > > batch and not 'interactively'. > > > > Just my ha'penny. > > > > > > > > On 16/09/2020 04:37, Charles Mills wrote: > > > Yeah, I am slowly learning that. :-/ > > > > > > Charles > > > > > > > > > -----Original Message----- > > > From: IBM Mainframe Discussion List [mailto:IBM- > > [email protected]] On Behalf Of David Spiegel > > > Sent: Tuesday, September 15, 2020 4:40 PM > > > To: [email protected] > > > Subject: Re: EXTERNAL EMAIL: How get a user to use his own catalog > > > rather > > than master? > > > > > > Hi Charles, > > > I have a self-imposed rule: Always do it in Batch (rather than via > > > TSO and/or ISPF). > > > This has at least 2 benefits: > > > 1) It's repeatable and a history is automatically kept (assuming > > > that you save every Batch Job). > > > 2) You get to learn the Utilities faster. > > > > > > -------------------------------------------------------------------- > > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > > send email to [email protected] with the message: INFO > > > IBM-MAIN . > > > > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, send > > email to [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email to > [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
