Bear in mind that in today's environment a simple ( 3 line ? ) 3270 emulator macro can get around any SDSF auto update restriction.
Rob Scott Rocket Software Sent from Samsung Mobile on O2 Sent from Outlook for Android<https://aka.ms/AAb9ysg> ________________________________ From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> on behalf of roscoe5 <0000056b62686b81-dmarc-requ...@listserv.ua.edu> Sent: Tuesday, November 26, 2024 1:09:13 PM To: IBM-MAIN@LISTSERV.UA.EDU <IBM-MAIN@LISTSERV.UA.EDU> Subject: Re: SDSF and RACF/SAF w z/OS 2.5 EXTERNAL EMAIL Thanks Rob, What tipped them off was the AUPDT parm. Previously, they had a parmlib setting of 10, so that you could not set an auto update (refresh) of an SDSF screen to move frequently than 10 seconds. After they could. I told them there likely were a lot more to look at. Not my shop, but I may be on a call later today. I’ll view your information. Thanks again, very much appreciated! R Sent from [Proton Mail](https://proton.me/mail/home<https://proton.me/mail/home>) for iOS On Tue, Nov 26, 2024 at 3:10 AM, Rob Scott <[00000618c90e6fdf-dmarc-requ...@listserv.ua.edu](mailto:On Tue, Nov 26, 2024 at 3:10 AM, Rob Scott <<a href=)> wrote: > SDSF 2.5+ will use SAF instead of internal (ISFPRMxx / ISFPARMS) security. > > There is a recent presentation on how SDSF 2.5 security works with SAF in the > IBM Education GitHub : > > github.com/IBM/IBM-Z-zOS/tree/main/zOS-Education/<http://github.com/IBM/IBM-Z-zOS/tree/main/zOS-Education> > > If you have migrated from non-SAF to SAF security, there is quite a lot of > migration considerations especially if you have not previously activated the > OPERCMDS and JESSPOOL classes. > > Other customization options in the ISFPRMxx GROUP statement should behave as > previously. > > One thing to check is that users are being placed into their expected SDSF > groups as the selection criteria is now ONLY that they have SAF READ access > to the SDSF class profile “GROUP.name.server”. Previously criteria like > userid or TSO logon proc name are no longer used. > > Do you have specific issues that you can expand on ? > > Rob Scott > Rocket Software > > From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of > roscoe5 > Sent: Tuesday, November 26, 2024 2:28 AM > To: IBM-MAIN@LISTSERV.UA.EDU > Subject: SDSF and RACF/SAF w z/OS 2.5 > > EXTERNAL EMAIL > > Hello, > Friends recently upgraded 2.4 to 2.5, and found that some previous controls > (eg.AUPDT) no longer work as before. I said I believe those controls moved > from parmlib to RACF. > We’re getting mixed feedback on that theory. > What say you? > Am I half right/wrong? > Are there exits, mods, exceptions, caveats, etc. that should be considered? > Thanks much! > R. > (May also post in RACF.) > > Sent from [Proton > Mail](https://proton.me/mail/home<https://proton.me/mail/home><https://proton.me/mail/home<https://proton.me/mail/home>>) > for iOS > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu<mailto:lists...@listserv.ua.edu> with > the message: INFO IBM-MAIN > > ================================ > Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ > Main Office Toll Free Number: +1 855.577.4323 > Contact Customer Support: > https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport<https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport> > Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - > http://www.rocketsoftware.com/manage-your-email-preferences<http://www.rocketsoftware.com/manage-your-email-preferences> > Privacy Policy - > http://www.rocketsoftware.com/company/legal/privacy-policy<http://www.rocketsoftware.com/company/legal/privacy-policy> > ================================ > > This communication and any attachments may contain confidential information > of Rocket Software, Inc. All unauthorized use, disclosure or distribution is > prohibited. If you are not the intended recipient, please notify Rocket > Software immediately and destroy all copies of this communication. Thank you. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
