For the 'fat fingers guys' you can implement a 4 eyes principle. There
are few products that does that (although the other two eyes might be
the same as the originals, but in another panel). 

Itschak 

-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On
Behalf Of Rob Scott
Sent: Monday, February 12, 2007 4:33 PM
To: [email protected]
Subject: Re: RACF Surrogate Authority


I have seen SURROGAT used effectively at sites for a shared group userid
for performing maintenance work. 

The group ID has a level of access that you would not want to give to
every member of the team - an extra "finger-check" if you will as "s" is
very close to "d" on the keyboard.... 

Typically this group ID does not have a TSO segment and its function is
also covered with some "are you sure" logic as well.  



Rob Scott
Rocket Software, Inc
275 Grove Street
Newton, MA 02466
617-614-2305
[EMAIL PROTECTED]
http://www.rs.com/portfolio/mxi_g2

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to