Thanks Koluso and Lizette Ive gone through the manuals already and cant seem to find what I need.
We are z/OS 1.13, RMDS is 2.3 (this hasn't changed in eons) and ACF2 is V15. This is the problem which we just recently discovered after decades: The RMDS administrator does set up something to determine who can browse which reports. However, once you get into DISPLAY mode on a report, theres a whole series of commands available - CAP, COLS, F(IND) etc. Fairly inoculous. However, there is also an ERASE command, which does not seem to have any restriction on it. This is on the report level, not the dsname level. A user that does not have ACF2 authority to delete the vsam cluster corresponding to the report can still delete the report by issuing ERASE. The report is no longer viewable and When the PURGE jobs runs, PURGE deletes the cluster. Ive been working with both IBM and CA on this but to no avail. It seems that once in RMDS, ACF2 is out of the picture. So I think this has to be controlled within RMDS. But we cant figure out how. Thanks, Donna -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Sri h Kolusu Sent: Monday, July 28, 2014 3:31 PM To: [email protected] Subject: Re: RMDS May be this will help Chapter 16 in Administration Guide http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DBNA3000 or this one http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DBNC3000 Kolusu IBM Mainframe Discussion List <[email protected]> wrote on 07/28/2014 12:08:10 PM: > From: "Roff, Donna" <[email protected]> > To: [email protected] > Date: 07/28/2014 12:19 PM > Subject: RMDS > Sent by: IBM Mainframe Discussion List <[email protected]> > > Hi, > > Is anyone here familiar with RMDS (Report Management Distribution System) ? > We have a question about security on one of the RMDS commands > available against a report. ACF2 protects the MVS datasets but this > is for the actual report. > > (This is my first post. I don't know if I need to put any introduction.) > > Thanks, > Donna > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
