Now you need to talk about documentqation. It's like sex. When it's bad,
it's still better than nothing and when it's good, it's really great.
Tony B. wrote:
Exits are a good alternative when: 1. The skillful author never retires,
finds a better job, gets laid off, is transferred, gets fired, wins the
lottery, or ages. 2. The company never is merged, acquired, downsizes, asks
for a government bailout, acquires another RACF company. 3. The source is
never misplaced. 4. zOS is never upgraded from OS390, MVS/ESA, MVS-prior
flavors.....
Else, the term exit should be renamed to "future headache for its
inheritors." 5% of my experiences involved exits where the original author
was still available...
Jaded. :-(
-----Original Message-----
From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf
Of Rick Fochtman
Sent: Friday, March 06, 2009 12:34 PM
To: IBM-MAIN@bama.ua.edu
Subject: Re: RACF password & id checking
----------------------------------------<snip>------------------------------
-----
IMHO: exits as a subspecies are evil critters. They become an ongoing
maintenance challenge and tend to attract unwelcome attention from auditors.
Exits are hard to write, hard to stress test, and introduce a level of risk.
You need extraordinary measures in place to protect the code.
-------------------------------------<unsnip>-------------------------------
------
I disagree, Hal. Exits CAN be overused and poorly coded; no argument there.
But they often provide the only mechanism of tayloring function to fit
business or technical needs, or sometimes arbitrary mandates from senior
management. Testing a new installation or upgraded level of the OS need not
be excessively delayed by the presence of exits; you just need to have good,
solid code and a good testing methodology in place.
But you need that anyway, don't you? As far as auditors are concerned, if
they know what they're actually auditing, then they will understand reasoned
arguments in favor of the appropriate exit. And of course you're going to
protect ANY exit as carefully, or more carefully, than any other piece of
APF-authorized code. Right?
--
Rick
--
Remember that if you're not the lead dog, the view never changes.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email
to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the
archives at http://bama.ua.edu/archives/ibm-main.html
No virus found in this incoming message.
Checked by AVG - www.avg.com
Version: 8.0.237 / Virus Database: 270.11.8/1985 - Release Date: 03/06/09
07:20:00
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
--
Rick
--
Remember that if you’re not the lead dog, the view never changes.
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
