Re: SFS REVOKE AUTH question

2008-06-20 Thread Schuh, Richard
GRANT AUTH PUBLIC gives access to anyone who is enrolled in the filepool. If you have ENROLL PUBLIC, then all VM users on the system are enrolled by policy. If it is a GLOBAL filepool, then all users in the ISFC collection are enrolled. That is rehashing something already said :-)

Re: SFS REVOKE AUTH question

2008-06-20 Thread Alan Altmark
On Friday, 06/20/2008 at 12:12 EDT, Schuh, Richard [EMAIL PROTECTED] wrote: That is one possibility - separate the filepools. What if it is desired that a user have access to most PUBLIC data in a filepool but be kept from accessing only a small fraction of it? You have to either keep the

Re: SFS REVOKE AUTH question

2008-06-20 Thread Schuh, Richard
Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Alan Altmark Sent: Friday, June 20, 2008 9:34 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS REVOKE AUTH question On Friday, 06/20/2008 at 12:12 EDT, Schuh, Richard [EMAIL PROTECTED] wrote: That is one possibility - separate

Re: SFS REVOKE AUTH question

2008-06-19 Thread Gentry, Stephen
[mailto:[EMAIL PROTECTED] On Behalf Of A. Harry Williams Sent: Thursday, June 19, 2008 7:00 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS REVOKE AUTH question On Wed, 18 Jun 2008 08:52:50 -0700 Schuh, Richard said: Unfortunately for you, granting authority to PUBLIC grants it to everyone who has

Re: SFS REVOKE AUTH question

2008-06-19 Thread Stracka, James (GTS)
[mailto:[EMAIL PROTECTED] On Behalf Of Gentry, Stephen Sent: Wednesday, June 18, 2008 8:23 AM To: IBMVM@LISTSERV.UARK.EDU Subject: SFS REVOKE AUTH question I am trying to REVOKE AUTH for an SFS user. The directory, let's call it VMSYS:MAINT.PUBLIC has had a GRANT AUTH PUBLIC done

Re: SFS REVOKE AUTH question

2008-06-19 Thread Schuh, Richard
One minor correction, PUBLIC grants access to everyone who has been enrolled in the filepool. If the id in question is not enrolled, it gains no access. They'll receive a DMSACCR1240E if they try to ACCESS the directory, FPLSFS733E reason code 30100 if they try to read a file

Re: SFS REVOKE AUTH question

2008-06-19 Thread Schuh, Richard
Only if PUBLIC is enrolled. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Stracka, James (GTS) Sent: Thursday, June 19, 2008 6:24 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS REVOKE AUTH question

Re: SFS REVOKE AUTH question

2008-06-19 Thread A. Harry Williams
On Thu, 19 Jun 2008 08:32:59 -0700 Schuh, Richard said: One minor correction, PUBLIC grants access to everyone who has been enrolled in the filepool. If the id in question is not enrolled, it gains no access. They'll receive a DMSACCR1240E if they try to ACCESS the directory, FPLSFS733E

Re: SFS REVOKE AUTH question

2008-06-19 Thread Schuh, Richard
-Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of A. Harry Williams Sent: Thursday, June 19, 2008 8:44 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS REVOKE AUTH question On Thu, 19 Jun 2008 08:32:59 -0700 Schuh, Richard said

Re: SFS REVOKE AUTH question

2008-06-19 Thread Peter . Webb
: SFS REVOKE AUTH question Like I said, I have never witnessed such a situation. Your case is hypothetical, and I admit there may be other hypothetical cases where it is necessary to enroll all but a few users in a filepool and then using the grant public mechanism without public being enrolled. What

Re: SFS REVOKE AUTH question

2008-06-19 Thread Schuh, Richard
that it will be needed before I retire. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Thursday, June 19, 2008 9:56 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS REVOKE AUTH question If you

Re: SFS REVOKE AUTH question

2008-06-19 Thread Alan Altmark
On Thursday, 06/19/2008 at 12:54 EDT, Schuh, Richard [EMAIL PROTECTED] wrote: Like I said, I have never witnessed such a situation. Your case is hypothetical, and I admit there may be other hypothetical cases where it is necessary to enroll all but a few users in a filepool and then using the

SFS REVOKE AUTH question

2008-06-18 Thread Gentry, Stephen
I am trying to REVOKE AUTH for an SFS user. The directory, let's call it VMSYS:MAINT.PUBLIC has had a GRANT AUTH PUBLIC done to it earlier. I have a specific user I do not want to access this directory. When I issue the REVOKE AUTH, (specifically: revoke auth vmsys:maint.public from steveg)

Re: SFS REVOKE AUTH question

2008-06-18 Thread Schuh, Richard
in the Enquirer. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Gentry, Stephen Sent: Wednesday, June 18, 2008 8:23 AM To: IBMVM@LISTSERV.UARK.EDU Subject: SFS REVOKE AUTH question I am trying to REVOKE

Re: SFS REVOKE AUTH question

2008-06-18 Thread Gentry, Stephen
- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Schuh, Richard Sent: Wednesday, June 18, 2008 11:53 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS REVOKE AUTH question Unfortunately for you, granting authority to PUBLIC grants it to everyone who has an id

Re: SFS REVOKE AUTH question

2008-06-18 Thread Schuh, Richard
. Regards, Richard Schuh -Original Message- From: The IBM z/VM Operating System [mailto:[EMAIL PROTECTED] On Behalf Of Gentry, Stephen Sent: Wednesday, June 18, 2008 9:00 AM To: IBMVM@LISTSERV.UARK.EDU Subject: Re: SFS REVOKE AUTH question Thanks for the reply. VM:Secure