On Thursday, 08/22/2013 at 03:10 EDT, Rob van der Heij <[email protected]>
wrote:
> Would RACFVARS be appropriate to hold the currently valid MAINTvrm
> userid(s) and have just a single ADDMEM and later DELMEM to deal with
> migration?

Yes.

> Especially with phased implementation on different members with a shared
> RACF database, if it's a lot of work to add the profiles, it's likely
they
> will not be cleaned up afterwards either. And while it does not harm
perse
> to have orphans, it causes extra work and lack of hygiene is frowned
upon
> when you need to do your annual justification for non-standard
permissions.
>
> Sure, this is begging for better guidance on setting up your RACF
database
> than what the provided installation program offers, or what
simple-minded
> expansion in the connector would do. But I believe it's not the first
time
> I suggested this...

All good suggestions must be submitted 3 times to assure their veracity
and continued relevance.  This is only twice.  ;-)

Alan Altmark

Senior Managing z/VM and Linux Consultant
IBM System Lab Services and Training
ibm.com/systems/services/labservices
office: 607.429.3323
mobile; 607.321.7556
[email protected]
IBM Endicott

----------------------------------------------------------------------
For LINUX-390 subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO LINUX-390 or visit
http://www.marist.edu/htbin/wlvindex?LINUX-390
----------------------------------------------------------------------
For more information on Linux on System z, visit
http://wiki.linuxvm.org/

Reply via email to