Re: Simpless way to prevent arbitary HLQ's

[Rick Fochtman]

Not really. I am do for Heart surgery in 3 weeks.
-
Hoping for the best, Ed. Wish you good results and a speedy recovery.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[Shmuel Metz (Seymour J.)]

In <[EMAIL PROTECTED]>, on 10/12/2008
   at 09:41 PM, Ed Gould <[EMAIL PROTECTED]> said:

>Not really. I am do for Heart surgery in 3 weeks. 

I hope that all goes well and that you have an easy recovery.
 
-- 
 Shmuel (Seymour J.) Metz, SysProg and JOAT
 ISO position; see  
We don't care. We don't have to care, we're Congress.
(S877: The Shut up and Eat Your spam act of 2003)

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[Ed Gould]

Not really. I am do for Heart surgery in 3 weeks. Then gone for 2 months. 


--- On Mon, 10/6/08, Jousma, David <[EMAIL PROTECTED]> wrote:

> From: Jousma, David <[EMAIL PROTECTED]>
> Subject: Re: Simpless way to prevent arbitary HLQ's
> To: IBM-MAIN@BAMA.UA.EDU
> Date: Monday, October 6, 2008, 1:38 PM
> Ed,
> 
> You are back!  I hope all is ok.
> 
> 
> 
> _
> Dave Jousma
> Assistant Vice President, Mainframe Services
> [EMAIL PROTECTED]
> 1830 East Paris, Grand Rapids, MI  49546 MD RSCB1G
> p 616.653.8429
> f 616.653.8497
> 
> -Original Message-
> From: IBM Mainframe Discussion List
> [mailto:[EMAIL PROTECTED] On
> Behalf Of Ed Gould
> Sent: Monday, October 06, 2008 2:21 PM
> To: IBM-MAIN@BAMA.UA.EDU
> Subject: Re: Simpless way to prevent arbitary HLQ's
> 
> --- On Mon, 10/6/08, R.S.
> <[EMAIL PROTECTED]> wrote:
> 
> > From: R.S. <[EMAIL PROTECTED]>
> 
> 
> What we did way back when when we did not have RACF was to
> put a
> password for update on the master catalog. It worked
> effectively. We
> never told the operator the password so either the operator
> replied
> incorrectly or no reply and the job timed out on a 522.
> 
> 
> 
> 
> 
>   
> 
> --
> For IBM-MAIN subscribe / signoff / archive access
> instructions,
> send email to [EMAIL PROTECTED] with the message: GET
> IBM-MAIN INFO
> Search the archives at
> http://bama.ua.edu/archives/ibm-main.html
> 
> 
> This e-mail transmission contains information that is
> confidential and may be privileged.   It is intended only
> for the addressee(s) named above. If you receive this e-mail
> in error, please do not read, copy or disseminate it in any
> manner. If you are not the intended recipient, any
> disclosure, copying, distribution or use of the contents of
> this information is prohibited. Please reply to the message
> immediately by informing the sender that the message was
> misdirected. After replying, please erase it from your
> computer system. Your assistance in correcting this error is
> appreciated.
> 
> --
> For IBM-MAIN subscribe / signoff / archive access
> instructions,
> send email to [EMAIL PROTECTED] with the message: GET
> IBM-MAIN INFO
> Search the archives at
> http://bama.ua.edu/archives/ibm-main.html


  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[R.S.]

Ed Gould wrote:
[...]

What we did way back when when we did not have RACF was to put a password for 
update on the master catalog. It worked effectively. We never told the operator 
the password so either the operator replied incorrectly or no reply and the job 
timed out on a 522.


Ed,
This is good for memoirs, not real (current) system.
Catalog passwords are no longer supported, since AFAIR OS/390 2.7 (DFSMS 
1.5). It's also pretty hard to not have RACF or other security server 
nowadays.

The only thing remained current is habit to not disclose passwords.

Regards
--
Radoslaw Skorupka
Lodz, Poland


--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl

Sd Rejonowy dla m. st. Warszawy 
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, 
nr rejestru przedsibiorców KRS 025237

NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2008 r. kapita zakadowy BRE Banku SA  wynosi 
118.642.672 zote i zosta w caoci wpacony.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[Dave Kopischke]

Ed's Back 

Where the heck have you been ???

You had some of us kinda worried.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[Jousma, David]

Ed,

You are back!  I hope all is ok.



_
Dave Jousma
Assistant Vice President, Mainframe Services
[EMAIL PROTECTED]
1830 East Paris, Grand Rapids, MI  49546 MD RSCB1G
p 616.653.8429
f 616.653.8497

-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Ed Gould
Sent: Monday, October 06, 2008 2:21 PM
To: IBM-MAIN@BAMA.UA.EDU
Subject: Re: Simpless way to prevent arbitary HLQ's

--- On Mon, 10/6/08, R.S. <[EMAIL PROTECTED]> wrote:

> From: R.S. <[EMAIL PROTECTED]>


What we did way back when when we did not have RACF was to put a
password for update on the master catalog. It worked effectively. We
never told the operator the password so either the operator replied
incorrectly or no reply and the job timed out on a 522.





  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html


This e-mail transmission contains information that is confidential and may be 
privileged.   It is intended only for the addressee(s) named above. If you 
receive this e-mail in error, please do not read, copy or disseminate it in any 
manner. If you are not the intended recipient, any disclosure, copying, 
distribution or use of the contents of this information is prohibited. Please 
reply to the message immediately by informing the sender that the message was 
misdirected. After replying, please erase it from your computer system. Your 
assistance in correcting this error is appreciated.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[Ed Gould]

--- On Mon, 10/6/08, R.S. <[EMAIL PROTECTED]> wrote:

> From: R.S. <[EMAIL PROTECTED]>
> Subject: Re: Simpless way to prevent arbitary HLQ's
> To: IBM-MAIN@BAMA.UA.EDU
> Date: Monday, October 6, 2008, 11:15 AM
> Miklos Szigetvari wrote:
> > Hi
> > 
> > Searching for the simples way to prevent the users to
> define dataset's 
> > in the MASTER catalog(s)
> > 
> 
> As other said: RACF.


What we did way back when when we did not have RACF was to put a password for 
update on the master catalog. It worked effectively. We never told the operator 
the password so either the operator replied incorrectly or no reply and the job 
timed out on a 522.





  

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[R.S.]

Miklos Szigetvari wrote:

Hi

Searching for the simples way to prevent the users to define dataset's 
in the MASTER catalog(s)




As other said: RACF.

However I want to complement it a little bit:
RACF (or ACF2 or others) can protect MCAT by UACC(READ) - this is one 
part of the story. The second is PROTECTALL - "illegal" HLQs will NOT be 
created, so will not be cataloged as well.
And everytime you allow new HLQ, you create rule (profile) in RACF as 
well as the alias and ACS routines (if needed).

Coordination.

--
Radoslaw Skorupka
Lodz, Poland


--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl

Sd Rejonowy dla m. st. Warszawy 
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego, 
nr rejestru przedsibiorców KRS 025237

NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2008 r. kapita zakadowy BRE Banku SA  wynosi 
118.642.672 zote i zosta w caoci wpacony.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[Jim McAlpine]

set UACC(READ) for master catalog.

Jim McAlpine

On Fri, Oct 3, 2008 at 10:25 AM, Miklos Szigetvari <
[EMAIL PROTECTED]> wrote:

> Hi
>
> Searching for the simples way to prevent the users to define dataset's in
> the MASTER catalog(s)
>
> --
> Miklos Szigetvari
>
> Development Team
> ISIS Information Systems Gmbh tel: (+43) 2236 27551 570
> Fax: (+43) 2236 21081
> E-mail: [EMAIL PROTECTED]
> Info: [EMAIL PROTECTED] Hotline: +43-2236-27551-111
> Visit our Website: 
> http://www.isis-papyrus.com---
> This e-mail is only intended for the recipient and not legally
> binding. Unauthorised use, publication, reproduction or
> disclosure of the content of this e-mail is not permitted.
> This email has been checked for known viruses, but ISIS accepts
> no responsibility for malicious or inappropriate content.
> ---
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
> Search the archives at http://bama.ua.edu/archives/ibm-main.html
>
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[Bri P]

We're RACF here.

I have the PROTECTALL option on, so users cannot allocate a dataset that isn't 
covered by a RACF dataset rule.

I have a RACF rule for the master catalog with UACC(READ) and ALTER access for 
syadmins/sysprogs, CONTROL access to some system STCs, and UPDATE access to any 
other users that I may allow to use master catalog, such as housekeeping tasks 
etc.



-Original Message-
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of 
Miklos Szigetvari
Sent: 03 October 2008 10:26
To: IBM-MAIN@BAMA.UA.EDU
Subject: Simpless way to prevent arbitary HLQ's

Hi

Searching for the simples way to prevent the users to define dataset's 
in the MASTER catalog(s)

-- 
Miklos Szigetvari


-
Email sent from www.virginmedia.com/email
Virus-checked using McAfee(R) Software and scanned for spam

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Re: Simpless way to prevent arbitary HLQ's

[Vernooy, C.P. - SPLXM]

"Miklos Szigetvari" <[EMAIL PROTECTED]> wrote in
message news:<[EMAIL PROTECTED]>...
> Hi
> 
> Searching for the simples way to prevent the users to define dataset's

> in the MASTER catalog(s)
> 
> -- 
> Miklos Szigetvari
> 
> Development Team
> ISIS Information Systems Gmbh 
> tel: (+43) 2236 27551 570
> Fax: (+43) 2236 21081 
> 
> E-mail: [EMAIL PROTECTED] 
> 

Restrict UPDATE access to the Master Catalogs.

Kees.
**
For information, services and offers, please visit our web site:
http://www.klm.com. This e-mail and any attachment may contain
confidential and privileged material intended for the addressee
only. If you are not the addressee, you are notified that no part
of the e-mail or any attachment may be disclosed, copied or
distributed, and that any other action related to this e-mail or
attachment is strictly prohibited, and may be unlawful. If you have
received this e-mail by error, please notify the sender immediately
by return e-mail, and delete this message. 

Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries
and/or its employees shall not be liable for the incorrect or
incomplete transmission of this e-mail or any attachments, nor
responsible for any delay in receipt.
Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal
Dutch Airlines) is registered in Amstelveen, The Netherlands, with
registered number 33014286 
**

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Simpless way to prevent arbitary HLQ's

[Miklos Szigetvari]

Hi

Searching for the simples way to prevent the users to define dataset's 
in the MASTER catalog(s)


--
Miklos Szigetvari

Development Team
ISIS Information Systems Gmbh 
tel: (+43) 2236 27551 570
Fax: (+43) 2236 21081 

E-mail: [EMAIL PROTECTED] 

Info: [EMAIL PROTECTED] 
Hotline: +43-2236-27551-111 

Visit our Website: http://www.isis-papyrus.com 
---

This e-mail is only intended for the recipient and not legally
binding. Unauthorised use, publication, reproduction or
disclosure of the content of this e-mail is not permitted.
This email has been checked for known viruses, but ISIS accepts
no responsibility for malicious or inappropriate content.
--- 


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html