--------------------------------------<snip>-------------------------------------
One of the issues (using RACF as an example) is that I can;'t trust the
RACF person all the time. I have seen them bend to political pressure
rather than arguing. I was never afraid to argue with politics. Once I
got a RACF person I could trust he would fyi me if he was told to "do
something" that we has set up to stop. The guy left and the person that
replaced him was a racg person that couldn't say no to anyone so I spent
40 percent of my time figuring out what he was doing. That is part of
the 100 hour work week I spent.
--------------------------------------<unsnip>----------------------------------
Political pressure can be resisted; it just depends on the courage of
the resistor. A good explanation of the risks and advantages involved
can make a BIG difference.
----------------------------------------<snip>------------------------------------
Another example we did not allow assembler programming so we turned off
all access to sys1.maclib. I also put the assembler and its alias's in
protested program status. That cut almost everyone except a consultant
who brought a copy of ASM H but it didn't do any good as he couldm't get
to sys1.maclib. He tried an end run on that and I caught him. He got
kicked out on his keister.
----------------------------------<unsnip>----------------------------------------
To disallow any Assembler programming seems a bit paranoid to me. A
decent review process can prevent any misuse or abuse and there are a
few types of things that can't be done (or couldn't until recently be
done) except in Assembler, such as system exits and processing of
certain SMF records. Seems to me that a consultant should have access to
the tools he needs to do his job, subject to a thorough review by
appropriate KNOWLEDGEABLE staff members. Especially in the case of
programs that need to be AUTHORIZED.
Rick
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html
