Ed, What I meant was that in many shops there are a lot of users who have implicit access to APF-authorized data sets. And if they wished to compromise the system they would be able to do so, even though they were never explicitly authorized to run their own written APF-authorized programs. There are many potential ways to do this, if the shop is not properly secured. I could give some common examples from my experience, but I believe you understand what I mean. A lot of the times they users a not aware to what they are actually capable (some shops even rely on that fact). I did not intend in any way to imply that it is common or that even I have ever seen it happen that someone was able to become APF authorized because of a flaw in the MVS mechanisms. Unlike some other operating systems where it is common, and I have seen it happen :) Gil. On 6/19/05, Edward E. Jaffe <[EMAIL PROTECTED]> wrote: > > This just can't be true. No amount of work experience should provide the > knowledge and tools to become APF authorized. Otherwise, MVS system > integrity is nothing more than a myth! And maybe that's you're point. I > simply don't believe it's true in the general case. >
---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html