Todd, Restricting access to the RACF database is essential, but it isn't enough to save you if the database is not allocated as unmovable. DFSMSdss' data management utility ADRDSSU, when used with the ADMINISTRATOR keyword, ignores dataset profiles and can perform functions such as compress on any dataset.
Regards, Bob Robert S. Hansel *** Celebrating 30 years working with RACF *** Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel http://twitter.com/RSH_RACF www.rshconsulting.com -----Original Message----- Date: Tue, 23 May 2017 18:36:52 +0000 From: "Burrell, Todd" <[email protected]> Subject: Re: RACF Database (was: Sample JCL for file transfer using NJE/TCPIP) Wouldn't a simpler solution to protecting the RACF database simply be to give pretty much no one ALTER access to it? I know that at most shops only one or two folks had ALTER or UPDATE to the actual file and that seems like the best course of action to avoid accidental deletion? And we backed up the RACF DB 4 times a day as well - just in case. Todd Burrell | Sr. Mainframe Systems Administrator ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
