Ben Alford wrote:

Allocations of scratch tape mounts can be controlled if in an SMS tape
environment such as a VTS or 3494 library.  The SMS routines have
access to info such as the RACF userid, group, and job name and can
fail execution for those who aren't your loved ones.  The SMS routines
are not called for existing datasets in these environments, so they
cannot prevent users from mounting existing tape datasets.

SMS ACS routines are not the best thing to control who's allowed to do anything. That's RACF domain. Fortunately RACF & SMS can play together: SMS assigns MGMTCLAS and STORCLAS and these resources are controlled by RACF. This is the time solution for scratch mount only, however access to existing tape datasets can be protected by DATASET class and/or TAPEVOL class. This works for both SMS-managed library tapes and stand-alone (or Storagetek resident) tapes. SMS ACS routines are only for system-managed (read IBM) tape libraries. It can be circumvented by defining STK library as MTL (Manual Tape Library), but AFAIK it is not popular among STK users.

My $0.02
--
Radoslaw Skorupka
Lodz, Poland

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to