Greg Boyd wrote:
>It depends on the application.  If you are using IEBGENER to copy DSNA (clear 
>text) to DSNB, and DSNB is flagged as requiring encryption  and key label KEYB 
>is associated with DSNB, then you must have write access to DSNB and read 
>access to KEYB.  IEBGENER will complete successfully if you have both.  But if 
>your RACF admin forgot to give you access to KEYB, then the operation will 
>fail.

Ok, so they've added protection against programs that do their own I/O. So that 
is a bit more protection than encrypting DASD. Guess I asked the wrong person 
before :)

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to