HI Brian Thanks. This , this is a very old product. Even IBM is not able to offer much advice.
We have an exit that just covers sign on. I would like to perhaps just disable that RMDS command - ERASE - completely for either all or most users. Within RMDS even, not ACF2. The RMDS administrator controls access through RMDS. But access seems to be all or nothing, if you can view it, you can erase it. Tx for looking for your exits. -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Brian France Sent: Tuesday, July 29, 2014 8:57 AM To: [email protected] Subject: Re: RMDS Way back machine started. Once upon a time we ran RMDS with ACF2. ACF2 versions woulda been like 6 and 8. I have no idea anymore what RMDS version we had. There were exits in RMDS that we utilized with ACF2. They would take the report name ( the one you see when you're in RMDS, not the data set name ) and pass it to the exit were we would make a data set like call to grant access. We had to write code utilizing the sample exit to do this. Think we placed standard HLQ on the report name when we built the data set like call to write rules against. There was a sign on exit as well. I looked for my exits but alas I musta cleaned house when RMDS went the way of the dino here... On 7/29/2014 8:27 AM, Roff, Donna wrote: > Thanks Koluso and Lizette > > Ive gone through the manuals already and cant seem to find what I need. > > We are z/OS 1.13, RMDS is 2.3 (this hasn't changed in eons) and ACF2 is V15. > > This is the problem which we just recently discovered after decades: > > The RMDS administrator does set up something to determine who can browse > which reports. However, once you get into DISPLAY mode on a report, theres a > whole series of commands available - CAP, COLS, F(IND) etc. Fairly > inoculous. However, there is also an ERASE command, which does not seem to > have any restriction on it. > > This is on the report level, not the dsname level. A user that does not have > ACF2 authority to delete the vsam cluster corresponding to the report can > still delete the report by issuing ERASE. The report is no longer viewable > and When the PURGE jobs runs, PURGE deletes the cluster. > > Ive been working with both IBM and CA on this but to no avail. It seems that > once in RMDS, ACF2 is out of the picture. So I think this has to be > controlled within RMDS. But we cant figure out how. > > Thanks, > Donna > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:[email protected]] On > Behalf Of Sri h Kolusu > Sent: Monday, July 28, 2014 3:31 PM > To: [email protected] > Subject: Re: RMDS > > May be this will help > > Chapter 16 in Administration Guide > > http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DBNA3000 > > or this one > > http://publibz.boulder.ibm.com/cgi-bin/bookmgr_OS390/BOOKS/DBNC3000 > > > Kolusu > > IBM Mainframe Discussion List <[email protected]> wrote on > 07/28/2014 12:08:10 PM: > >> From: "Roff, Donna" <[email protected]> >> To: [email protected] >> Date: 07/28/2014 12:19 PM >> Subject: RMDS >> Sent by: IBM Mainframe Discussion List <[email protected]> >> >> Hi, >> >> Is anyone here familiar with RMDS (Report Management Distribution > System) ? >> We have a question about security on one of the RMDS commands >> available against a report. ACF2 protects the MVS datasets but this >> is for the actual report. >> >> (This is my first post. I don't know if I need to put any > introduction.) >> Thanks, >> Donna >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, send >> email to [email protected] with the message: INFO IBM-MAIN >> > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send email to > [email protected] with the message: INFO IBM-MAIN > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN -- Brian W. France Systems Administrator (Mainframe) Pennsylvania State University Administrative Information Services - Infrastructure/SYSARC Rm 25 Shields Bldg., University Park, Pa. 16802 814-863-4739 [email protected] "To make an apple pie from scratch, you must first invent the universe." Carl Sagan ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
