Users probably need read access to mcat so they can access SYS1.MACLIB and 
others like it.

> -----Original Message-----
> From: IBM Mainframe Discussion List <[email protected]> On
> Behalf Of Jesse 1 Robinson
> Sent: Thursday, September 17, 2020 5:06 PM
> To: [email protected]
> Subject: Re: How get a user to use his own catalog rather than master?
> 
> Maybe I need a make-up class at Saturday morning vocab class. Then again 
> maybe it's
> a distinction without a difference. Here's why you do *not* want to 
> over-grant update
> access to the master catalog.
> 
> -- For the average user, there should be some user catalog pointed to by an 
> alias in
> mcat. There is no need for access to mcat. All ucats need to be managed and 
> subjected
> to regular housekeeping.
> 
> -- For someone who genuinely needs update or greater access to the master 
> catalog,
> failure to create a ucat alias causes *all* data sets created by the user to 
> go into mcat.
> This insidious result can go unnoticed for a long period. Getting the mcat 
> cleaned up
> can be arduous, time consuming, and disruptive.
> 
> As for whether gratuitous update access to mcat is a 'security' or an 
> 'integrity' problem,
> extensive damage is possible. Simply deleting ucat aliases from mcat can 
> bring a
> system to its knees. This is without touching a single customer data set. 
> Don't let it
> happen.
> 
> .
> .
> J.O.Skip Robinson
> Southern California Edison Company
> Electric Dragon Team Paddler
> SHARE MVS Program Co-Manager
> 323-715-0595 Mobile
> 626-543-6132 Office ⇐=== NEW
> [email protected]

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to