Re: RACF Class PROGRAM

2012-12-09 Thread Walt Farrell
On Fri, 7 Dec 2012 13:46:22 +0100, ibmmain wrote: > >thanks for the confirmation. But: I have no clue how to run an experiment on >this. I guess I'll be keeping what's left in >the program class. (The * profile with certain data sets that I have shown). The experiment is simple, and harmless,

Re: RACF Class PROGRAM

2012-12-09 Thread Walt Farrell
On Fri, 7 Dec 2012 16:05:10 +0100, "R.S." wrote: >In general you are 100% right. >However many people use PROGRAM class only to fulfill requirements of >TCPIP setup and other stuff. >In this case they define CL(PROGRAM) ** profile and and several >IBM-z/OS-provided libraries in ADDMEM. >In suc

Re: RACF Class PROGRAM

2012-12-07 Thread R.S.
W dniu 2012-12-07 13:17, Walt Farrell pisze: On Fri, 7 Dec 2012 08:20:28 +0100, R.S. wrote: BTW: IMHO BASIC mode is quite good mode, you don't have to move to EHANCED mode just because such mode exists. Sorry, Radoslaw, but even though I'm not an IBMer any more, I have to disagree with you.

Re: RACF Class PROGRAM

2012-12-07 Thread ibmmain
Walt, > I believe that is an incorrect inference, Barbara. As I remember, that > documentation is specific to the case it describes, having an exactly > matching name (ABC) and that same exactly matching name but extended by the * > (ABC*). > > For the case of ABC and * RACF should still use

Re: RACF Class PROGRAM

2012-12-07 Thread Walt Farrell
On Fri, 7 Dec 2012 12:08:32 +0100, ibmmain wrote: >> RACF use the best match principle. If it can't find a matching >> profile/member, it will move on to profiles with wildcards: >> >> So, for example, it will move from profile XYZ to XY* to X* to *. >> >> If no match are found, a default return

Re: RACF Class PROGRAM

2012-12-07 Thread Walt Farrell
On Fri, 7 Dec 2012 08:20:28 +0100, R.S. wrote: >BTW: IMHO BASIC mode is quite good mode, you don't have to move to >EHANCED mode just because such mode exists. Sorry, Radoslaw, but even though I'm not an IBMer any more, I have to disagree with you. As the designer of the enhanced program sec

Re: RACF Class PROGRAM

2012-12-07 Thread Elardus Engelbrecht
Barbara Nitz wrote: >Well, the RACF admin guide (chapter 9.2.1 Simple program protection in BASIC >or ENHANCED mode) states: >If you have two PROGRAM profiles named ABC* and ABC, and both profiles specify >the name of the library where the ABC program resides, RACF uses the ABC* >profile for au

Re: RACF Class PROGRAM

2012-12-07 Thread ibmmain
> RACF use the best match principle. If it can't find a matching > profile/member, it will move on to profiles with wildcards: > > So, for example, it will move from profile XYZ to XY* to X* to *. > > If no match are found, a default return code for PROGRAM is used. Well, the RACF admin guide (

Re: RACF Class PROGRAM

2012-12-07 Thread Elardus Engelbrecht
Barbara Nitz wrote: >I know that this is not the RACF list, but I am not subscribed there, so I am >hoping that someone can tell me what to do. Many RACF-L guys/gals are lurking on IBM-MAIN. And Radoslaw kindly answered you properly. >If I read the book right (and the answer above is yes, th

Re: RACF Class PROGRAM

2012-12-06 Thread R.S.
W dniu 2012-12-07 07:30, ibmmain pisze: [...] ADCD 1.13 system. SETROPTS LIST ATTRIBUTES = INITSTATS WHEN(PROGRAM -- BASIC) ACTIVE CLASSES = DATASET USER GROUP ACCTNUM AIMS CBIND CDT CIMS DIMS DSNR EJBROLE FACILITY GEJBROLE GIMS GXFACILI IIMS JIMS LIMS LOGSTRM MIMS PTKTDATA PTKTVAL RIMS SERVAUTH

RACF Class PROGRAM

2012-12-06 Thread ibmmain
I know that this is not the RACF list, but I am not subscribed there, so I am hoping that someone can tell me what to do. I am reluctant to make changes in that class - if I am wrong, then I cannot get into my telnet session anymore because OMVS/TCPIP might have severe problems. ADCD 1.13 syste