Not necessarily. Around here, they are using RACF to lock down APF dataset updates. It takes a change request with 2-3 approvers to get RACF authority to update an APF dataset.
SET PROG= you say? Well, you can always do anything ONCE. Bob -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Charles Mills Sent: Friday, August 05, 2016 7:51 AM To: [email protected] Subject: Re: Adding Module to an empty APFed Library I think security professionals would argue against "leaving an APF library around." APF is the keys to the kingdom. Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Mike Schwab Sent: Thursday, August 04, 2016 10:01 AM To: [email protected] Subject: Re: Adding Module to an empty APFed Library On Wed, Aug 3, 2016 at 7:17 PM, retired mainframer <[email protected]> wrote: > If an empty dataset is on the APF list, it already exists. Why it exists and > why it is on the list are different questions. > > Adding a member to an existing empty dataset is NO different than adding a > member to an existing populated one. > > What is the additional exposure? > Say you are installing a new product that requires an APF product. In order to test, you install the empty libraries on test AND production systems. Then install on the test system and test. For a while, you would have an empty library on the production system. Or you have uninstalled the product and left the library there in case the product is needed. (I.E. read an old file). ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
