On Thu, 13 May 2010 11:15:43 -0500, Patrick Lyon <ptl...@midamerican.com> wrote:
>On Thu, 13 May 2010 10:31:39 -0500, Mark Zelden <mzel...@flash.net> >wrote: > >>Not if you define only 1 profile as GIM.*. I suspect that will suffice for >>at least 95% of the shops out there. We've already discussed the >>unlikelihood of shops desiring to do something more granular like >>giving a certain set of users RECEIVE only (even though it could be done). >> >>Mark > >I say 'potato', you say 'potatoe'. :) > >I see your point, but I'm still defining discrete profiles here, and we are a small >shop. Only two sysprogs with one working manager. > >We have a few scheduled jobs that kick off that do SMP/E work, like REPORT >and RECEIVE. I guess my fear is of someone getting SURROGAT to that ID >and could wreak havoc, which of course, is unlikely, but possible. > >So that ID only gets those attributes. > It's your shop and RACF to maintain, but you still only need the generic profile and whichever ones you need to control more granularly. Do you define every possible profile under STGADMIN for example just because many exist? Regards, Mark -- Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS mailto:mzel...@flash.net Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html Systems Programming expert at http://expertanswercenter.techtarget.com/ ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
