W dniu 2013-09-10 14:09, Russell Witt pisze:
Arthur is correct. Back at my JCP days, that is one reason they broke the "SYSPROG" job
into 3 different jobs. You had the assembler programers who wrote the exits and any assembler
user-mods or in-house applications; the SMP jockeys that applied IBM maintenance and also tested
the assembler exits from the programmers and put together the production libraries, and finally the
Operations sysprogs that actually moved the libraries given them by the SMP jockeys into
production. No one person was authorized to do it all; and technically there were checks at each
step to make sure that nothing "special" was moved forward.
Of course, it would still have been possible for the assembler programmer to move an exit
into production that granted him special authority; but since that programmer didn't even
have a good usable ID on the other systems it would not have done him a lot of good. It
would require at least 2 people to do something "outside" the norm.
In modern world they call it "separation of duties".
Of course it is as old as SPECIAL and AUDITOR, not to mention SPECIAL's
access to the resources.
--
Radoslaw Skorupka
Lodz, Poland
--
Treść tej wiadomości może zawierać informacje prawnie chronione Banku
przeznaczone wyłącznie do użytku służbowego adresata. Odbiorcą może być jedynie
jej adresat z wyłączeniem dostępu osób trzecich. Jeżeli nie jesteś adresatem
niniejszej wiadomości lub pracownikiem upoważnionym do jej przekazania
adresatowi, informujemy, że jej rozpowszechnianie, kopiowanie, rozprowadzanie
lub inne działanie o podobnym charakterze jest prawnie zabronione i może być
karalne. Jeżeli otrzymałeś tę wiadomość omyłkowo, prosimy niezwłocznie
zawiadomić nadawcę wysyłając odpowiedź oraz trwale usunąć tę wiadomość
włączając w to wszelkie jej kopie wydrukowane lub zapisane na dysku.
This e-mail may contain legally privileged information of the Bank and is intended solely for business use of the addressee. This e-mail may only be received by the addressee and may not be disclosed to any third parties. If you are not the intended addressee of this e-mail or the employee authorised to forward it to the addressee, be advised that any dissemination, copying, distribution or any other similar activity is legally prohibited and may be punishable. If you received this e-mail by mistake please advise the sender immediately by using the reply facility in your e-mail software and delete permanently this e-mail including any copies of it either printed or saved to hard drive.
BRE Bank SA, 00-950 Warszawa, ul. Senatorska 18, tel. +48 (22) 829 00 00, fax
+48 (22) 829 00 33, www.brebank.pl, e-mail: [email protected]
Sąd Rejonowy dla m. st. Warszawy XII Wydział Gospodarczy Krajowego Rejestru Sądowego, nr rejestru przedsiębiorców KRS 0000025237, NIP: 526-021-50-88.
Według stanu na dzień 01.01.2013 r. kapitał zakładowy BRE Banku SA (w całości wpłacony) wynosi 168.555.904 złotych.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
