Re: Who is changing a user's ISPF profile
Was not aware of shared profile. I'll read up on it. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Tom Conley Sent: Friday, July 5, 2019 11:41 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Who is changing a user's ISPF profile On 7/5/2019 11:35 AM, Paul Gilmartin wrote: > On Fri, 5 Jul 2019 09:35:49 -0500, Elardus Engelbrecht wrote: > >> Allan Staller wrote: >> >>> This typically happens (in my experience) when a single ISPPROF dataset is >>> shared across multiple images (last update wins). >> >> True, last one wins always. This is WAD, not BAD. >> > ISPF Edit nicely serializes member updates. ISPF seems unable to do > likewise with ISPPROF. I call that BAD. > Shared profile support fixed this. If you're not using it, you should be. Grab my SHARE presentation "Configuring ISPF for Fun and Profit", here (WTW): https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fshare.confex.com%2Fshare%2F118%2Fwebprogram%2FHandout%2FSession10948%2FConfiguring%2520ISPF%2520for%2520Fun%2520and%2520Profit.pdf&data=02%7C01%7Callan.staller%40HCL.COM%7Cef2424913e3f4e8d29f608d70167938f%7C189de737c93a4f5a8b686f4ca9941912%7C0%7C1%7C636979416713813850&sdata=%2F0rNu6oYJt%2FkjV%2FJ8SxQITQps2GMs8r43%2FmzgjoTxOg%3D&reserved=0 > Should there be more metadata for accountability? Would PDSE member > versions help? > >>> A)Code/install ISPF EXIT 16 to change the name of the ISPPROF dataset being >>> used to something image specific. >> >> This is what I did. No problemo anymore with unneeded ISPPROF dsn changes by >> LPAR specific applications. >> > Ouch! So profile changes on a "master" system remain invisible on > subordinate systems? > > Perhaps more control should be given to the user, such as a > confirmation prompt at > LOGOFF: "Do you want to save or discard profile changes?" > This is an option with shared profile support. Either do it in ISPCCONF, or the SHRPROF command. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ::DISCLAIMER:: -- The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. -- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
On 7/5/2019 11:35 AM, Paul Gilmartin wrote: On Fri, 5 Jul 2019 09:35:49 -0500, Elardus Engelbrecht wrote: Allan Staller wrote: This typically happens (in my experience) when a single ISPPROF dataset is shared across multiple images (last update wins). True, last one wins always. This is WAD, not BAD. ISPF Edit nicely serializes member updates. ISPF seems unable to do likewise with ISPPROF. I call that BAD. Shared profile support fixed this. If you're not using it, you should be. Grab my SHARE presentation "Configuring ISPF for Fun and Profit", here (WTW): https://share.confex.com/share/118/webprogram/Handout/Session10948/Configuring%20ISPF%20for%20Fun%20and%20Profit.pdf Should there be more metadata for accountability? Would PDSE member versions help? A)Code/install ISPF EXIT 16 to change the name of the ISPPROF dataset being used to something image specific. This is what I did. No problemo anymore with unneeded ISPPROF dsn changes by LPAR specific applications. Ouch! So profile changes on a "master" system remain invisible on subordinate systems? Perhaps more control should be given to the user, such as a confirmation prompt at LOGOFF: "Do you want to save or discard profile changes?" This is an option with shared profile support. Either do it in ISPCCONF, or the SHRPROF command. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
On 7/5/2019 10:35 AM, Elardus Engelbrecht wrote: Allan Staller wrote: This typically happens (in my experience) when a single ISPPROF dataset is shared across multiple images (last update wins). True, last one wins always. This is WAD, not BAD. Actually, the behavior is controlled by settings in the ISPF Configuration Dialog or SHRPROF command. Last one wins is a default, and a good one. But feel free to chose others. A)Code/install ISPF EXIT 16 to change the name of the ISPPROF dataset being used to something image specific. This is what I did. No problemo anymore with unneeded ISPPROF dsn changes by LPAR specific applications. Bad idea from an ISPF Edit Recovery standpoint. In a unique profile environment, if USERA on SYSA edits a dataset and goes into recovery, then USERA on SYSB later edits the same dataset, then goes back to A, gets the recovery, and then saves it, all changes from the SYSB session are lost. If you share datasets across LPARs, you should share the ISPF profile across those same LPARs. As an aside, if you're using exit 16 to build your profile name, you should move that logic into your TSO logon exec. Regards, Tom Conley -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
ISPF also nicely serializes ISPPROF updates. >>This typically happens (in my experience) when a single ISPPROF dataset is >>shared across multiple images (last update wins). > >True, last one wins always. This is WAD, not BAD. > ISPF Edit nicely serializes member updates. ISPF seems unable to do likewise with ISPPROF. I call that BAD. -->ISPF also nicely serializes ISPPROF updates. Ouch! So profile changes on a "master" system remain invisible on subordinate systems? > Nope. As was previously indicated, given a single dataset, the latest update wins. Perhaps more control should be given to the user, such as a confirmation prompt at LOGOFF: "Do you want to save or discard profile changes?" > This is why ISPF Exit 16 was provided. To segregate the ISPPROF datasets. No need for the prompt. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Paul Gilmartin Sent: Friday, July 5, 2019 10:35 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Who is changing a user's ISPF profile On Fri, 5 Jul 2019 09:35:49 -0500, Elardus Engelbrecht wrote: >Allan Staller wrote: > >>This typically happens (in my experience) when a single ISPPROF dataset is >>shared across multiple images (last update wins). > >True, last one wins always. This is WAD, not BAD. > ISPF Edit nicely serializes member updates. ISPF seems unable to do likewise with ISPPROF. I call that BAD. Should there be more metadata for accountability? Would PDSE member versions help? >>A)Code/install ISPF EXIT 16 to change the name of the ISPPROF dataset being >>used to something image specific. > >This is what I did. No problemo anymore with unneeded ISPPROF dsn changes by >LPAR specific applications. > Ouch! So profile changes on a "master" system remain invisible on subordinate systems? Perhaps more control should be given to the user, such as a confirmation prompt at LOGOFF: "Do you want to save or discard profile changes?" -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ::DISCLAIMER:: -- The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. -- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
Paul Gilmartin wrote: >>>This typically happens (in my experience) when a single ISPPROF dataset is >>>shared across multiple images (last update wins). True, last one wins >>>always. This is WAD, not BAD. >ISPF Edit nicely serializes member updates. ISPF seems unable to do likewise >with ISPPROF. I call that BAD. So I read about that somewhere many moons ago. I agree with you. >>This is what I did. No problemo anymore with unneeded ISPPROF dsn changes by >>LPAR specific applications. >Perhaps more control should be given to the user, such as a confirmation >prompt at >LOGOFF: "Do you want to save or discard profile changes?" They will reply incorrectly and then shout at you where are my things... Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
On Fri, 5 Jul 2019 09:35:49 -0500, Elardus Engelbrecht wrote: >Allan Staller wrote: > >>This typically happens (in my experience) when a single ISPPROF dataset is >>shared across multiple images (last update wins). > >True, last one wins always. This is WAD, not BAD. > ISPF Edit nicely serializes member updates. ISPF seems unable to do likewise with ISPPROF. I call that BAD. Should there be more metadata for accountability? Would PDSE member versions help? >>A)Code/install ISPF EXIT 16 to change the name of the ISPPROF dataset being >>used to something image specific. > >This is what I did. No problemo anymore with unneeded ISPPROF dsn changes by >LPAR specific applications. > Ouch! So profile changes on a "master" system remain invisible on subordinate systems? Perhaps more control should be given to the user, such as a confirmation prompt at LOGOFF: "Do you want to save or discard profile changes?" -- gil -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
Allan Staller wrote: >This typically happens (in my experience) when a single ISPPROF dataset is >shared across multiple images (last update wins). True, last one wins always. This is WAD, not BAD. >A)Code/install ISPF EXIT 16 to change the name of the ISPPROF dataset being >used to something image specific. This is what I did. No problemo anymore with unneeded ISPPROF dsn changes by LPAR specific applications. Groete / Greetings Elardus Engelbrecht -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
This typically happens (in my experience) when a single ISPPROF dataset is shared across multiple images (last update wins). A)Code/install ISPF EXIT 16 to change the name of the ISPPROF dataset being used to something image specific. B)Live with it HTH, -Original Message- From: IBM Mainframe Discussion List On Behalf Of ITschak Mugzach Sent: Friday, July 5, 2019 9:22 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Re: Who is changing a user's ISPF profile Lizette, I think ISPF enqueues the profile table even on concatenated dd,so not sure they can share ISRPROF/ISPPROF. ITschak On Fri, Jul 5, 2019 at 5:16 PM Lizette Koehler wrote: > Note the following information from the ISPF Manual > > > https://apc01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fwww. > ibm.com%2Fsupport%2Fknowledgecenter%2Fen%2FSSLTBW_2.1.0%2Fcom.ibm.zos. > v2r1.f54ug00%2Faloptab.htm&data=02%7C01%7Callan.staller%40HCL.COM% > 7Ce70a12bbab864cbaae1f08d701543a5e%7C189de737c93a4f5a8b686f4ca9941912% > 7C0%7C0%7C636979333612770566&sdata=A%2B9gYJaqHYvp8kpZYiX4TLYqSgjKf > VA0%2BcWFq7aewsU%3D&reserved=0 > > > The table output library must be a partitioned data set. The ISPTABL > ddname that defines the table output library can specify the same data > set as the table input library, ddname ISPTLIB. The first data set in > the ISPTLIB concatenation should be the same as the data set used for ISPTABL. > This ensures predictable behavior of dialogs that use table services > without specifying the LIBRARY keyword. The output and input data sets > must be the same if the updated version of a table is to be > reprocessed by the same dialog that updated it. > > The behavior can be due to the allocations on ISPTLIB and ISPTABL. > > Make sure the users dataset is at the top of BOTH allocations. > > Lizette > > > -Original Message- > > From: IBM Mainframe Discussion List On > Behalf Of > > ITschak Mugzach > > Sent: Friday, July 05, 2019 6:12 AM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: Who is changing a user's ISPF profile > > > > And last: an ispf application is invoked without appl so it set > > pfkeys > and > > other profile settings is ISR / ISP instead of its own profile. > > > > ITschak > > > > בתאריך יום ו׳, 5 ביולי 2019, 16:03, מאת Joel C. Ewing > > >: > > > > > Various possibilities: > > > (1)The user is attempting to violate installation standards and a > > > default installation initial edit macro is forcing the edit > > > profile values back > > > > > > (2)The user is attempting to modify a locked edit profile, which > > > means any changes he makes are temporary -- locking some default > > > edit profiles is another way installations can encourage what they > > > believe to be best practices for certain dataset types > > > > > > (3) The user may be changing the final qualifier of the dataset > > > name, not realizing that the edit profile is tied to the final > > > qualifier of the dataset name, not to the dataset itself. > > > > > > (4) The user may be editing datasets with so many different final > > > dataset name qualifiers that he is exceeding the maximum number of > > > retained edit profiles as defined by the installation -- which > > > means his version of the least recently used edit profile will be > > > dropped and the next time he edits a dataset corresponding to that > > > edit profile a default profile will be used. > > > > > > I'm sure there are other possibilities. > > > Joel C. Ewing > > > > > > On 7/5/19 1:26 AM, Vernooij, Kees (ITOP NM) - KLM wrote: > > > > If it is e.g. an ISPF Edit Initial Macro, changed by someone, > > > > the user > > > will be the one that modifies the Profile. This will be difficult > > > to > trap. > > > > What has changed in their profile? > > > > > > > > Kees. > > > > > > > >> -Original Message- > > > >> From: IBM Mainframe Discussion List > > > >> [mailto:IBM-MAIN@LISTSERV.UA.EDU] > > > On > > > >> Behalf Of Anthony Thompson > > > >> Sent: 05 July, 2019 4:33 > > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > > >> Subject: Re: Who is changing a user's ISPF profile > > > >> > > > >> You probably want SMF record type 15, to tell you who has > > > >> opened a > > > dataset > > > >> for output, and when. > > > >> > > > >> Are y
Re: Who is changing a user's ISPF profile
Lizette, I think ISPF enqueues the profile table even on concatenated dd,so not sure they can share ISRPROF/ISPPROF. ITschak On Fri, Jul 5, 2019 at 5:16 PM Lizette Koehler wrote: > Note the following information from the ISPF Manual > > > https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.f54ug00/aloptab.htm > > > The table output library must be a partitioned data set. The ISPTABL > ddname that defines the table output library can specify the same data set > as the table input library, ddname ISPTLIB. The first data set in the > ISPTLIB concatenation should be the same as the data set used for ISPTABL. > This ensures predictable behavior of dialogs that use table services > without specifying the LIBRARY keyword. The output and input data sets must > be the same if the updated version of a table is to be reprocessed by the > same dialog that updated it. > > The behavior can be due to the allocations on ISPTLIB and ISPTABL. > > Make sure the users dataset is at the top of BOTH allocations. > > Lizette > > > -Original Message- > > From: IBM Mainframe Discussion List On > Behalf Of > > ITschak Mugzach > > Sent: Friday, July 05, 2019 6:12 AM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: Who is changing a user's ISPF profile > > > > And last: an ispf application is invoked without appl so it set pfkeys > and > > other profile settings is ISR / ISP instead of its own profile. > > > > ITschak > > > > בתאריך יום ו׳, 5 ביולי 2019, 16:03, מאת Joel C. Ewing >: > > > > > Various possibilities: > > > (1)The user is attempting to violate installation standards and a > > > default installation initial edit macro is forcing the edit profile > > > values back > > > > > > (2)The user is attempting to modify a locked edit profile, which means > > > any changes he makes are temporary -- locking some default edit > > > profiles is another way installations can encourage what they believe > > > to be best practices for certain dataset types > > > > > > (3) The user may be changing the final qualifier of the dataset name, > > > not realizing that the edit profile is tied to the final qualifier of > > > the dataset name, not to the dataset itself. > > > > > > (4) The user may be editing datasets with so many different final > > > dataset name qualifiers that he is exceeding the maximum number of > > > retained edit profiles as defined by the installation -- which means > > > his version of the least recently used edit profile will be dropped > > > and the next time he edits a dataset corresponding to that edit > > > profile a default profile will be used. > > > > > > I'm sure there are other possibilities. > > > Joel C. Ewing > > > > > > On 7/5/19 1:26 AM, Vernooij, Kees (ITOP NM) - KLM wrote: > > > > If it is e.g. an ISPF Edit Initial Macro, changed by someone, the > > > > user > > > will be the one that modifies the Profile. This will be difficult to > trap. > > > > What has changed in their profile? > > > > > > > > Kees. > > > > > > > >> -Original Message- > > > >> From: IBM Mainframe Discussion List > > > >> [mailto:IBM-MAIN@LISTSERV.UA.EDU] > > > On > > > >> Behalf Of Anthony Thompson > > > >> Sent: 05 July, 2019 4:33 > > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > > >> Subject: Re: Who is changing a user's ISPF profile > > > >> > > > >> You probably want SMF record type 15, to tell you who has opened a > > > dataset > > > >> for output, and when. > > > >> > > > >> Are you a RACF shop? You can define a RACF profile for the user's > > > >> ISPF profile dataset to ensure that only they have more than READ > > > >> access, and use NOTIFY(userid) to get a TSO message whenever some > > > >> other > > > user/whatever > > > >> fails the RACF check. ACF2 has similar facilities, and I've never > > > >> met > > > TSS. > > > >> > > > >> Ant. > > > >> > > > >> -Original Message- > > > >> From: IBM Mainframe Discussion List On > > > Behalf > > > >> Of Gadi Ben-Avi > > > >> Sent: Friday, 5 July 2019 12:21 AM > > > >> To: IBM-MAIN@LISTS
Re: Who is changing a user's ISPF profile
Note the following information from the ISPF Manual https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.1.0/com.ibm.zos.v2r1.f54ug00/aloptab.htm The table output library must be a partitioned data set. The ISPTABL ddname that defines the table output library can specify the same data set as the table input library, ddname ISPTLIB. The first data set in the ISPTLIB concatenation should be the same as the data set used for ISPTABL. This ensures predictable behavior of dialogs that use table services without specifying the LIBRARY keyword. The output and input data sets must be the same if the updated version of a table is to be reprocessed by the same dialog that updated it. The behavior can be due to the allocations on ISPTLIB and ISPTABL. Make sure the users dataset is at the top of BOTH allocations. Lizette > -Original Message- > From: IBM Mainframe Discussion List On Behalf Of > ITschak Mugzach > Sent: Friday, July 05, 2019 6:12 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Who is changing a user's ISPF profile > > And last: an ispf application is invoked without appl so it set pfkeys and > other profile settings is ISR / ISP instead of its own profile. > > ITschak > > בתאריך יום ו׳, 5 ביולי 2019, 16:03, מאת Joel C. Ewing : > > > Various possibilities: > > (1)The user is attempting to violate installation standards and a > > default installation initial edit macro is forcing the edit profile > > values back > > > > (2)The user is attempting to modify a locked edit profile, which means > > any changes he makes are temporary -- locking some default edit > > profiles is another way installations can encourage what they believe > > to be best practices for certain dataset types > > > > (3) The user may be changing the final qualifier of the dataset name, > > not realizing that the edit profile is tied to the final qualifier of > > the dataset name, not to the dataset itself. > > > > (4) The user may be editing datasets with so many different final > > dataset name qualifiers that he is exceeding the maximum number of > > retained edit profiles as defined by the installation -- which means > > his version of the least recently used edit profile will be dropped > > and the next time he edits a dataset corresponding to that edit > > profile a default profile will be used. > > > > I'm sure there are other possibilities. > > Joel C. Ewing > > > > On 7/5/19 1:26 AM, Vernooij, Kees (ITOP NM) - KLM wrote: > > > If it is e.g. an ISPF Edit Initial Macro, changed by someone, the > > > user > > will be the one that modifies the Profile. This will be difficult to trap. > > > What has changed in their profile? > > > > > > Kees. > > > > > >> -----Original Message- > > >> From: IBM Mainframe Discussion List > > >> [mailto:IBM-MAIN@LISTSERV.UA.EDU] > > On > > >> Behalf Of Anthony Thompson > > >> Sent: 05 July, 2019 4:33 > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > >> Subject: Re: Who is changing a user's ISPF profile > > >> > > >> You probably want SMF record type 15, to tell you who has opened a > > dataset > > >> for output, and when. > > >> > > >> Are you a RACF shop? You can define a RACF profile for the user's > > >> ISPF profile dataset to ensure that only they have more than READ > > >> access, and use NOTIFY(userid) to get a TSO message whenever some > > >> other > > user/whatever > > >> fails the RACF check. ACF2 has similar facilities, and I've never > > >> met > > TSS. > > >> > > >> Ant. > > >> > > >> -Original Message- > > >> From: IBM Mainframe Discussion List On > > Behalf > > >> Of Gadi Ben-Avi > > >> Sent: Friday, 5 July 2019 12:21 AM > > >> To: IBM-MAIN@LISTSERV.UA.EDU > > >> Subject: Who is changing a user's ISPF profile > > >> > > >> Hi, > > >> > > >> A user is complaining that 'someone' is changing their ISPF profile > > >> and setting that they set up are changing. > > >> > > >> Can I track this in SMF and see who, if anyone is doing this? > > >> > > >> I saw the SMF 42 records are created when members in a PDS or PDS/E > > >> are changed. > > >> > > >> Will they pick up ISPF profile changes? > > >> We are running z/OS v2.2. > > >> > > >> Thanks > > >> Gadi > > -- > > Joel C. Ewing > > [>] -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
And last: an ispf application is invoked without appl so it set pfkeys and other profile settings is ISR / ISP instead of its own profile. ITschak בתאריך יום ו׳, 5 ביולי 2019, 16:03, מאת Joel C. Ewing : > Various possibilities: > (1)The user is attempting to violate installation standards and a > default installation initial edit macro is forcing the edit profile > values back > > (2)The user is attempting to modify a locked edit profile, which means > any changes he makes are temporary -- locking some default edit > profiles is another way installations can encourage what they believe to > be best practices for certain dataset types > > (3) The user may be changing the final qualifier of the dataset name, > not realizing that the edit profile is tied to the final qualifier of > the dataset name, not to the dataset itself. > > (4) The user may be editing datasets with so many different final > dataset name qualifiers that he is exceeding the maximum number of > retained edit profiles as defined by the installation -- which means his > version of the least recently used edit profile will be dropped and the > next time he edits a dataset corresponding to that edit profile a > default profile will be used. > > I'm sure there are other possibilities. > Joel C. Ewing > > On 7/5/19 1:26 AM, Vernooij, Kees (ITOP NM) - KLM wrote: > > If it is e.g. an ISPF Edit Initial Macro, changed by someone, the user > will be the one that modifies the Profile. This will be difficult to trap. > > What has changed in their profile? > > > > Kees. > > > >> -Original Message- > >> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] > On > >> Behalf Of Anthony Thompson > >> Sent: 05 July, 2019 4:33 > >> To: IBM-MAIN@LISTSERV.UA.EDU > >> Subject: Re: Who is changing a user's ISPF profile > >> > >> You probably want SMF record type 15, to tell you who has opened a > dataset > >> for output, and when. > >> > >> Are you a RACF shop? You can define a RACF profile for the user's ISPF > >> profile dataset to ensure that only they have more than READ access, and > >> use NOTIFY(userid) to get a TSO message whenever some other > user/whatever > >> fails the RACF check. ACF2 has similar facilities, and I've never met > TSS. > >> > >> Ant. > >> > >> -Original Message- > >> From: IBM Mainframe Discussion List On > Behalf > >> Of Gadi Ben-Avi > >> Sent: Friday, 5 July 2019 12:21 AM > >> To: IBM-MAIN@LISTSERV.UA.EDU > >> Subject: Who is changing a user's ISPF profile > >> > >> Hi, > >> > >> A user is complaining that 'someone' is changing their ISPF profile and > >> setting that they set up are changing. > >> > >> Can I track this in SMF and see who, if anyone is doing this? > >> > >> I saw the SMF 42 records are created when members in a PDS or PDS/E are > >> changed. > >> > >> Will they pick up ISPF profile changes? > >> > >> > >> > >> We are running z/OS v2.2. > >> > >> > >> > >> Thanks > >> > >> > >> > >> Gadi > >> > >> > >> > >> > > -- > Joel C. Ewing > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
Various possibilities: (1)The user is attempting to violate installation standards and a default installation initial edit macro is forcing the edit profile values back (2)The user is attempting to modify a locked edit profile, which means any changes he makes are temporary -- locking some default edit profiles is another way installations can encourage what they believe to be best practices for certain dataset types (3) The user may be changing the final qualifier of the dataset name, not realizing that the edit profile is tied to the final qualifier of the dataset name, not to the dataset itself. (4) The user may be editing datasets with so many different final dataset name qualifiers that he is exceeding the maximum number of retained edit profiles as defined by the installation -- which means his version of the least recently used edit profile will be dropped and the next time he edits a dataset corresponding to that edit profile a default profile will be used. I'm sure there are other possibilities. Joel C. Ewing On 7/5/19 1:26 AM, Vernooij, Kees (ITOP NM) - KLM wrote: > If it is e.g. an ISPF Edit Initial Macro, changed by someone, the user will > be the one that modifies the Profile. This will be difficult to trap. > What has changed in their profile? > > Kees. > >> -Original Message- >> From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On >> Behalf Of Anthony Thompson >> Sent: 05 July, 2019 4:33 >> To: IBM-MAIN@LISTSERV.UA.EDU >> Subject: Re: Who is changing a user's ISPF profile >> >> You probably want SMF record type 15, to tell you who has opened a dataset >> for output, and when. >> >> Are you a RACF shop? You can define a RACF profile for the user's ISPF >> profile dataset to ensure that only they have more than READ access, and >> use NOTIFY(userid) to get a TSO message whenever some other user/whatever >> fails the RACF check. ACF2 has similar facilities, and I've never met TSS. >> >> Ant. >> >> -Original Message- >> From: IBM Mainframe Discussion List On Behalf >> Of Gadi Ben-Avi >> Sent: Friday, 5 July 2019 12:21 AM >> To: IBM-MAIN@LISTSERV.UA.EDU >> Subject: Who is changing a user's ISPF profile >> >> Hi, >> >> A user is complaining that 'someone' is changing their ISPF profile and >> setting that they set up are changing. >> >> Can I track this in SMF and see who, if anyone is doing this? >> >> I saw the SMF 42 records are created when members in a PDS or PDS/E are >> changed. >> >> Will they pick up ISPF profile changes? >> >> >> >> We are running z/OS v2.2. >> >> >> >> Thanks >> >> >> >> Gadi >> >> >> >> -- Joel C. Ewing -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
Multiple images? -Original Message- From: IBM Mainframe Discussion List On Behalf Of Gadi Ben-Avi Sent: Thursday, July 4, 2019 9:51 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Who is changing a user's ISPF profile Hi, A user is complaining that 'someone' is changing their ISPF profile and setting that they set up are changing. Can I track this in SMF and see who, if anyone is doing this? I saw the SMF 42 records are created when members in a PDS or PDS/E are changed. Will they pick up ISPF profile changes? We are running z/OS v2.2. Thanks Gadi -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ::DISCLAIMER:: -- The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. -- -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
If it is e.g. an ISPF Edit Initial Macro, changed by someone, the user will be the one that modifies the Profile. This will be difficult to trap. What has changed in their profile? Kees. > -Original Message- > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > Behalf Of Anthony Thompson > Sent: 05 July, 2019 4:33 > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Re: Who is changing a user's ISPF profile > > You probably want SMF record type 15, to tell you who has opened a dataset > for output, and when. > > Are you a RACF shop? You can define a RACF profile for the user's ISPF > profile dataset to ensure that only they have more than READ access, and > use NOTIFY(userid) to get a TSO message whenever some other user/whatever > fails the RACF check. ACF2 has similar facilities, and I've never met TSS. > > Ant. > > -Original Message- > From: IBM Mainframe Discussion List On Behalf > Of Gadi Ben-Avi > Sent: Friday, 5 July 2019 12:21 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: Who is changing a user's ISPF profile > > Hi, > > A user is complaining that 'someone' is changing their ISPF profile and > setting that they set up are changing. > > Can I track this in SMF and see who, if anyone is doing this? > > I saw the SMF 42 records are created when members in a PDS or PDS/E are > changed. > > Will they pick up ISPF profile changes? > > > > We are running z/OS v2.2. > > > > Thanks > > > > Gadi > > > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, send email > to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > > -- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286 -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Re: Who is changing a user's ISPF profile
You probably want SMF record type 15, to tell you who has opened a dataset for output, and when. Are you a RACF shop? You can define a RACF profile for the user's ISPF profile dataset to ensure that only they have more than READ access, and use NOTIFY(userid) to get a TSO message whenever some other user/whatever fails the RACF check. ACF2 has similar facilities, and I've never met TSS. Ant. -Original Message- From: IBM Mainframe Discussion List On Behalf Of Gadi Ben-Avi Sent: Friday, 5 July 2019 12:21 AM To: IBM-MAIN@LISTSERV.UA.EDU Subject: Who is changing a user's ISPF profile Hi, A user is complaining that 'someone' is changing their ISPF profile and setting that they set up are changing. Can I track this in SMF and see who, if anyone is doing this? I saw the SMF 42 records are created when members in a PDS or PDS/E are changed. Will they pick up ISPF profile changes? We are running z/OS v2.2. Thanks Gadi -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
Who is changing a user's ISPF profile
Hi, A user is complaining that 'someone' is changing their ISPF profile and setting that they set up are changing. Can I track this in SMF and see who, if anyone is doing this? I saw the SMF 42 records are created when members in a PDS or PDS/E are changed. Will they pick up ISPF profile changes? We are running z/OS v2.2. Thanks Gadi -- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
