Radoslaw Skorupka wrote:
>>BTW: SDSF, JESSPOOL and OPERCMDS reliationships are not easy to 
understand.

Radoslaw is a master of words despite one spelling error above. ;-)


John Mattson wrote: 
>Radoslaw !!!  Your statement is so eloquent in its simplicity and accuracy. 

His English is not his first language, but he is still a master! ;-D


PS, Radoslaw, I usually don't like to discuss persons, but here I would like to 
make an exception if you don't care.  ;-)

> I have been trying for weeks now just to implement the most basic SDSF 
with SAF.  

This can be challenging. Trust me on this. You are not alone.

>I have used the basic setup in the manual with SYSPROG, OPS, and USER 
groups and I have it mostly working. 

Get your ISFPARMS working with RACF classes SDSF, OPERCMDS and 
JESSPOOL turned off. And get your TSOAUTH defined properly according to 
your ISFPARMS. 

Then move on activating one class at a time. Activate your classes and 
adding most generic profiles first and then adding more and more profiles.

Entries in RACF GAT may or may not complicate your RACF setup, because 
access is allowed, but NOT denied.

One thing to remember, you will need to fly out of SDSF and come back into it 
to pick up the latest RACF changes. Then you will have grey hairs left for 
retirement. ;-) 

One last thing, SDSF pre-populate your SDSF screens according to the RACF 
profiles setup when you enter SDSF. Depending on the RACF class, you may or 
may not get any ICH408I messages.

>One thing would help is IBM would have separate sections, or manuals, to 
address implementation with a) ISFPARMS + SAF b) ISFGRP macros +SAF and
avoid mixing the two.  The manual constantly switches between various
"modes" of implementation in a most confusing manner.

Of course. This is about flexibility and backward compatibility. A PITA, yes. 
You can perhaps write a message to SDSF manual authors.

Disclaimer: I never worked with ISFGRP macros. No need for it sofar.

About your subject line: The default behaviour of SDSF is to allow owners to 
do whatever with their own jobs.

Look in RACF-L for examples for lots of SDSF + RACF setup questions.

Groete / Greetings
Elardus Engelbrecht

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to