On Monday, 01/22/2007 at 12:02 EST, David Boyes <[EMAIL PROTECTED]> 
wrote:
> Well, that?s kind of what the ACIGROUP functionality is for, but it 
really 
> requires an ESM. The other problem is that you can be in only one 
ACIGROUP at a 
> time, so if you need combinations of privileges, you end up defining 
n**2 
> possible groups. 
>
> If you have RACF or VM:Secure or some such, that?d be the way to do 
this. 

(cough) If you have RACF, use of ACIGROUPs will complicate your life - 
don't do it.  It will change the way you have to maintain some (not all) 
resources in the database.  RACF has its own group concepts; use that 
instead.

Alan Altmark
z/VM Development
IBM Endicott

Reply via email to