Evidence of what Barb ? Don't hang anyone on this evidence. Anyone with update access to the pds can update this field.. I do it all the time to source code libraries to set the version level in the uid field.
I can't think how you would do it. The ds name in the RACF call will not contain a member name just the pds name as it is the directory which is being updated. Maybe an ISPF exit ? On Fri, Jul 7, 2017 at 8:05 AM, Barbara Nitz <[email protected]> wrote: > A colleague of mine just asked me if ISPF statistics in a data set, > especially the USERID field, can be manipulated. We used ISPF 3.5 and we > were both astonished that I was easily able to fake a userid as the one who > last changed a member (testing in my own dataset, of course). > > This immediately raised the question for me if there is any RACF control > that would prevent this type of manipulation, especially since the userids > in those statistics are widely used as evidence. Does anyone know if there > are such RACF controls? A quick search in the ISPF books didn't turn up any > hint. > > Barbara > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
