If you work for an outsourcer, yes, you could have all three security products (BTDT with ACS).

And you could have JES2 and JES3 environments.

For me, as a developer of OBS/ACS Wylbur, I had to know those three and WACF (Wylbur Access Control Facility -- IF I remember the name correctly). And I had to support customers that had them. To cut down on the work load I started working on implementing SAF(?) which allowed a client to run any and I only needed one access interface --- in theory. And I had to know the interfaces for JES2 and JES3 since we had customers split between those.

Same kind of problem at Droole & Babble (formerly Boole & Babbage, which is now owned by BMC). And Sterling Commerce's NDM or Connect:Direct -- acquired by IBM (and then sold off...).

Steve Thompson

On 2/5/2026 2:17 PM, Phil Smith III wrote:
I'm sure you're right (I've heard that the approaches are surprisingly 
different), but why would you need to know all three, unless you're going to a 
vendor? I've heard of shops with two (typically trying to get to one), but is 
it common to have all three??

-----Original Message-----
From: IBM Mainframe Discussion List <[email protected]> On Behalf Of 
David Spiegel
Sent: Thursday, February 5, 2026 2:13 PM
To: [email protected]
Subject: Re: Cross Posted

Hi Len,
Your statement is somewhat naive.
RACF has a hierarchical structure (Users and Groups) TSS is user-centric, 
unlike the other 2.
ACF2 has a 24-Byte UID String. G-d help you if it is not designed properly.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to