Hum, I'm a bit confused by this John. What I am hearing is "In my opinion, all modules in an APF library should be there only if they themselves do APF authorized work." Maybe even "And should be marked as AC=1". I am sure you can see where this would be very difficult. Take libraries such as SYS1.LINKLIB, and SYS1.SIEALNKE, They absolutely need APF authorization. Of course, SYS1.LINKLIB was designed in the days before APF. So perhaps if IBM were free to redo the design, they might separate the APF (AC=1) modules into a SYS1.APFLIB . But both would still need to be on the LNKLST. And i would guess that would mean that we should all have LNKAUTH=APFTAB in IEASYSnn. With this I will agree, even though we don't do it (due to historical inertia and, now, the fact that z/OS is sunsetted and so a "no unneeded changes" rule is in strict force.)
What about a subroutine, such as a generalized parser, which is used by both APF and non-APF code. Are you saying that this one module really should be duplicated; once into an APF library and the second in a non-APF library? I can vaguely see where your separation might make it easier to guarantee system security. But makes sharing more burdensome. Or am I not understanding due to suffering from a 3 day weekend with too much time spent killing goblins? (gaming). On Tue, May 27, 2014 at 9:34 AM, John Gilmore <[email protected]> wrote: > Kees, > > Tastes and judgments differ. I think the non-problem you mention is > created by what, in my view, is the very bad practice of putting a > "non-authorized" routine in an an authorized library. > > John Gilmore, Ashland, MA 01721 - USA > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > -- There is nothing more pleasant than traveling and meeting new people! Genghis Khan Maranatha! <>< John McKown ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
