I believe the documentation needs updating for both ISYS and OWNER as they can be used to force users into specific ring-fenced settings when used alongside denying the users access to the SYSNAME and OWNER commands.
I will get a doc update case created for this internally. Rob Scott Principal Architect, Mainframe Systems Tools Distinguished Engineer Rocket Software 77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA Tel: +1.781.684.2305<tel:+17816842305> Email: [email protected]<mailto:[email protected]> Web: www.rocketsoftware.com<http://www.rocketsoftware.com/> ________________________________ From: IBM Mainframe Discussion List <[email protected]> on behalf of Michael Babcock <[email protected]> Sent: Monday, August 22, 2022 1:51:21 PM To: [email protected] <[email protected]> Subject: ISYS and OWNER in ISFPRMxx EXTERNAL EMAIL The SDSF Security Migration guide says OWNER, GPLEN and ISYS are not applicable to SAF but the “clean up ISFPRMxx” section show them being removed from ISFPRMxx. If they are not applicable to SAF why are they being removed after conversion to SAF? The ISYS seems to be controlled by the SYSNAME command, thus via the ISFCMD.FILTER.SYSNAME profile. Same with OWNER and the ISFCMD.FILTER.OWNER profile. GPLEN is a little different since what’s displayed is controlled by other profiles. I would argue that all of these are applicable to SAF. Does the doc need to be updated or am I not understanding something? -- Michael Babcock OneMain Financial z/OS Systems Programmer, Lead ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ================================ Rocket Software, Inc. and subsidiaries ¦ 77 Fourth Avenue, Waltham MA 02451 ¦ Main Office Toll Free Number: +1 855.577.4323 Contact Customer Support: https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - http://www.rocketsoftware.com/manage-your-email-preferences Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy ================================ This communication and any attachments may contain confidential information of Rocket Software, Inc. All unauthorized use, disclosure or distribution is prohibited. If you are not the intended recipient, please notify Rocket Software immediately and destroy all copies of this communication. Thank you. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
