On Wed, 14 Jun 2023 19:30:06 -0500, John McKown wrote:

>Look up Access Lists and the UNIX setfacl command.
>
>But having shred fulesystems where the UIDs and GIDs differ is just asking
>for headaches.
> 
If users are authorized to access various resources it shouldn't matter
which system they use for the purpose.  It requires that users and
resources be similarly named across systems.

The more IDs an employee has, the more complicated the cleanup
when they leaves.

>Imagine, in your case, if you had different RACFs and Group access on the
>two systems. I worked at a place which did that, supposedly so that they
>could easily track what a given person did on which system.
>
I worked at a place where TSO IDs were T||employee-number and
VM IDs were V||employee-number.

So they could tell.

-- 
gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to