Robert S. Hansel (RSH) wrote:

>OPERATIONS users actually can grant privileges because they can create dataset 
>profiles for any group. And if they own a profile they create, they can permit 
>access to it.

RACF by default will allow that OPERATIONS stunt. IRREVX01 can be used to block 
those acrobats.

I needed to block them, because 'they' created profiles causing outages. No 
Production STCs are going to use users own datasets. 

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to