Hello list,

I've been poring through the FileManager manuals and either am missing 
something or it doesn't exist regarding security.  We're running FM 13.1 under 
ISPF so non-APF authorized.  I needed to grant the capability for browsing tape 
datasets to a developer.  I did this granting READ access to FILEM.FUNCTION.TB. 
 This granted the access to the tape browse function.  However, it appears that 
FileManager bypasses dataset name SAF checking if the user has access to the TB 
function.  To wit: a particular GDG has a mix of tape and disk generations.  I 
specifically denied access to this GDG to my ID.  I get a RACF violation when 
trying to browse the disk based generation, but FileManager allows me to use TB 
to look at the tape generation.  Is this WAS or am I missing some setting that 
tells FM to do dataset name SAF checking as well as FM function checking?



The information contained in this message is confidential, protected from 
disclosure and may be legally privileged.  If the reader of this message is not 
the intended recipient or an employee or agent responsible for delivering this 
message to the intended recipient, you are hereby notified that any disclosure, 
distribution, copying, or any action taken or action omitted in reliance on it, 
is strictly prohibited and may be unlawful.  If you have received this 
communication in error, please notify us immediately by replying to this 
message and destroy the material in its entirety, whether in electronic or hard 
copy format.  Thank you.

For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to