Maybe I shouldn't say anything after Scott, however I'll dare to. <g>
I don't know "guts" of subsytems and commands, but I know more or less
how RACF (or ACF) protection works for them:
If we're talking about MVS commands, I mean START, STOP, CANCEL, FORCE,
MODIFY - all those commands *are* protected, despite of application design.
If we're talking about "CMDPRFX command" , then it is up to the
application whether SAF is called or not. Subsystems like SDSF, RACF,
MQ, JES2, STK HSC use their own command prefix and do call SAF for
authorization. It can be, but need not to be OPERCMDS class resource.
Others, like DB2 (older versions) do not call SAF.
Many subsystems/applications, like CICS, BMC ControlM, VTAM, RMM, HSM do
not use its own command prefix - all the control is provided through
MODIFY/other commands. In such case relevant OPERCMDS profile will
always be called.
My $0.02
--
Radoslaw Skorupka
Lodz, Poland
--
BRE Bank SA
ul. Senatorska 18
00-950 Warszawa
www.brebank.pl
Sd Rejonowy dla m. st. Warszawy
XII Wydzia Gospodarczy Krajowego Rejestru Sdowego,
nr rejestru przedsibiorców KRS 0000025237
NIP: 526-021-50-88
Wedug stanu na dzie 01.01.2007 r. kapita zakadowy BRE Banku SA (w caoci
opacony) wynosi 118.064.140 z. W zwizku z realizacj warunkowego
podwyszenia kapitau zakadowego, na podstawie uchwa XVI WZ z dnia 21.05.2003
r., kapita zakadowy BRE Banku SA moe ulec podwyszeniu do kwoty 118.760.528
z. Akcje w podwyszonym kapitale zakadowym bd w caoci opacone.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
