Way, Richard wrote: >Realize this is a pretty basic question, but my Google-fu isn't working out >today.... Can someone tell me the most common / easiest way to prevent >allocating a data set that doesn't have a catalog alias defined yet? We're >hitting situations where someone creates a data set by the HLQ of "TEST", for >example, and because no one created an ALIAS for TEST to a USERCAT, the >catalog entries for those data sets go straight into the MASTERCAT.
>I'm almost certain there's a way to do this, but I am struggling whether it's >usually done by RACF or if there's a better / easier way... You need to do several things. You got answers about ONE thing - MCAT, but that is not enough! 0. Establish naming standards. Do that properly to start with. 1. MCAT - UACC=READ. UPDATE to storage admin and lucky few who will listen to you. READ for RESTRICTED ids. 2. Usercat - UACC=UPDATE. UPDATE to restricted ids for ucats as needed. 3. Use PROTECTALL(FAIL) 4. Fix your RACF profiles. Optional - If you have a sandbox Sysplex and Prod Sysplex - have separate MCATs and perhaps a few shared UCATs. You then need to decide on WHAT ucat you may allow ALTER to certain HLQ on what Sysplex. So for example, you allow ALTER on HLQ ABC on sandbox, but UPDATE on Prod and so on. Talk with your RACF admin. HTH! Groete / Greetings Elardus Engelbrecht ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
