Joel C. Ewing wrote:

>It seems rather odd to want to only allow READ access through a specific 
>program, ...

Agreed.

>... no one seems to have mentioned RACF program-controlled access.  RACF 
>PROGRAM profiles can be used both to
control access to specific programs and to conditionally control access to data 
sets.

Thanks. Perhaps I should mentioned that, but I'm not really fond of using those 
conditionally access controls. That is making things somewhat difficult.

>... and the difficult-to-remember part is that if the names of libraries in 
>the LINKLIST change, this profile must be updated
accordingly. 

Indeed. see my comment above. :-)

>To be on the safe side, be sure to create these PROGRAM profiles with UACC 
>READ before activating PROGRAM profiles so as to not shoot yourself in the 
>foot by immediately denying access to all programs for all users!

Damn! Why are you telling the newbies? I want them to shoot themselves in their 
feet... :-D :-D :-D

No, seriously, this is a good warning. One cannot be too careful.

Thanks Joel for your post. I'm sure it will help the OP.

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to