Re: Next SMP/E question

2023-09-08 Thread Kurt Quackenbush
>  ADD DDDEF(VSHZFSX)  PATH'/u/some/directory') .



> So it doesn't validate access to or even existence of that directory. 

APPLY CHECK does indeed check for the existence of the directory, but it does 
not check a user's permissions to update files in that directory.

Kurt Quackenbush
IBM  |  z/OS SMP/E and z/OSMF Software Management  |  ku...@us.ibm.com

Chuck Norris never uses CHECK when he applies PTFs.

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Next SMP/E question

2023-09-05 Thread David Spiegel

Hi Phil,
That is true provided the DDDEFs are instead coded as JCL.

Regards,
David

On 2023-09-05 20:47, Phil Smith III wrote:

Mark Jacobs wrote:

Apply check doesn't open any target traditional datasets, or Unix
System Services paths, so it's WAD. Whether it should is a different
question.

And in my experience (limited, obviously) with traditional target data sets, 
you'll get a JCL error earlier. So this may just be How It Works, unless 
someone else has another idea.

Thanks.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Next SMP/E question

2023-09-05 Thread Attila Fogarasi
The rationale is simple:  the target libraries may not be accessible on the
system performing the APPLY CHECK ... for example, golden master
environment, where APPLY CHECK is to validate the fix pre/coreq before
distribution.  Another example is security rights, APPLY cauld run under a
more powerful userid than APPLY CHECK, which affects dataset access.

On Wed, Sep 6, 2023 at 10:42 AM Mark Jacobs <
0224d287a4b1-dmarc-requ...@listserv.ua.edu> wrote:

> Apply check doesn't open any target traditional datasets, or Unix System
> Services paths, so it's WAD. Whether it should is a different question.
>
> Mark Jacobs
>
> Sent from ProtonMail, Swiss-based encrypted email.
>
> GPG Public Key -
> https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com
>
>
> --- Original Message ---
> On Tuesday, September 5th, 2023 at 8:25 PM, Phil Smith III <
> li...@akphs.com> wrote:
>
>
> > I have a statement in the allocate job:
> >
> > ADD DDDEF(VSHZFSX) PATH'/u/some/directory') .
> >
> >
> >
> > The later Apply Check job just does:
> >
> > //SMPCNTL DD *
> >
> > SET BOUNDARY(TARGET) .
> >
> > APPLY S(VVSH840) CHECK .
> >
> >
> >
> > So it doesn't validate access to or even existence of that directory.
> Could/should it? I don't know whether this is even reasonable, which makes
> it a bit hard to research! Obviously we'll document it in great detail, but
> as previously noted, I'm trying to make this as easy as possible for the
> users, and failing on Apply Check seems more correct than on Apply (which
> is where it fails now if that directory isn't there or the user doesn't
> have R/W access).
> >
> >
> > --
> > For IBM-MAIN subscribe / signoff / archive access instructions,
> > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
>

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Next SMP/E question

2023-09-05 Thread Phil Smith III
Mark Jacobs wrote:
>Apply check doesn't open any target traditional datasets, or Unix
>System Services paths, so it's WAD. Whether it should is a different
>question.

And in my experience (limited, obviously) with traditional target data sets, 
you'll get a JCL error earlier. So this may just be How It Works, unless 
someone else has another idea.

Thanks.


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Re: Next SMP/E question

2023-09-05 Thread Mark Jacobs
Apply check doesn't open any target traditional datasets, or Unix System 
Services paths, so it's WAD. Whether it should is a different question.

Mark Jacobs 

Sent from ProtonMail, Swiss-based encrypted email.

GPG Public Key - 
https://api.protonmail.ch/pks/lookup?op=get=markjac...@protonmail.com


--- Original Message ---
On Tuesday, September 5th, 2023 at 8:25 PM, Phil Smith III  
wrote:


> I have a statement in the allocate job:
> 
> ADD DDDEF(VSHZFSX) PATH'/u/some/directory') .
> 
> 
> 
> The later Apply Check job just does:
> 
> //SMPCNTL DD *
> 
> SET BOUNDARY(TARGET) .
> 
> APPLY S(VVSH840) CHECK .
> 
> 
> 
> So it doesn't validate access to or even existence of that directory. 
> Could/should it? I don't know whether this is even reasonable, which makes it 
> a bit hard to research! Obviously we'll document it in great detail, but as 
> previously noted, I'm trying to make this as easy as possible for the users, 
> and failing on Apply Check seems more correct than on Apply (which is where 
> it fails now if that directory isn't there or the user doesn't have R/W 
> access).
> 
> 
> --
> For IBM-MAIN subscribe / signoff / archive access instructions,
> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN


Next SMP/E question

2023-09-05 Thread Phil Smith III
I have a statement in the allocate job:

 ADD DDDEF(VSHZFSX)  PATH'/u/some/directory') .

 

The later Apply Check job just does:

//SMPCNTL  DD *   

  SET BOUNDARY(TARGET) .  

  APPLY S(VVSH840) CHECK .

 

So it doesn't validate access to or even existence of that directory. 
Could/should it? I don't know whether this is even reasonable, which makes it a 
bit hard to research! Obviously we'll document it in great detail, but as 
previously noted, I'm trying to make this as easy as possible for the users, 
and failing on Apply Check seems more correct than on Apply (which is where it 
fails now if that directory isn't there or the user doesn't have R/W access).


--
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN