Hello list, I've been poring through the FileManager manuals and either am missing something or it doesn't exist regarding security. We're running FM 13.1 under ISPF so non-APF authorized. I needed to grant the capability for browsing tape datasets to a developer. I did this granting READ access to FILEM.FUNCTION.TB. This granted the access to the tape browse function. However, it appears that FileManager bypasses dataset name SAF checking if the user has access to the TB function. To wit: a particular GDG has a mix of tape and disk generations. I specifically denied access to this GDG to my ID. I get a RACF violation when trying to browse the disk based generation, but FileManager allows me to use TB to look at the tape generation. Is this WAS or am I missing some setting that tells FM to do dataset name SAF checking as well as FM function checking?
TIA, Rex The information contained in this message is confidential, protected from disclosure and may be legally privileged. If the reader of this message is not the intended recipient or an employee or agent responsible for delivering this message to the intended recipient, you are hereby notified that any disclosure, distribution, copying, or any action taken or action omitted in reliance on it, is strictly prohibited and may be unlawful. If you have received this communication in error, please notify us immediately by replying to this message and destroy the material in its entirety, whether in electronic or hard copy format. Thank you. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
