🚀 go-pugleaf

In one sense it's very questionable from a point of view of security for one
person to ask about the access rights of another person. Why would you want
to know? So it isn't allowed for mere mortals. But you can always ask RACF
on your own behalf!

-----Original Message-----
From: TSO REXX Discussion List [mailto:TSO-REXX@VM.MARIST.EDU] On Behalf Of
Paul Gilmartin
Sent: den 22 februari 2013 16:04
To: TSO-REXX@VM.MARIST.EDU
Subject: Re: [TSO-REXX] sysdsn - dataset protected

On Feb 22, 2013, at 07:50, Farley, Peter x23353 wrote:

> In ISPF 3.4, trying to browse a dataset to which you do not have read
access results in a SAF message that you don't have access, a log of the
attempted access, and maybe an annoying but functionally useless "abend"
message (913-xx), but you are not kicked out of TSO or ISPF as a result.
You just hit the enter key to get rid of the messages and then continue your
work.  Why can't a callable tool provide the same functionality (preferably
without the useless abend)?  Log the attempt, issue the SAF messages and set
a return code that says "You're not allowed read access to that dataset" and
just keep going.
>
Isn't that callable tool "OPEN", or perhaps "EXECIO 0 DISKR ddname (OPEN"?
That doesn't kick you out of Rexx.  Yes, you incur the overhead of
catalog search and allocation, but that's the same as the ISPF 3.4
BROWSE technique.

> Security features should not prevent *attempts* to access, just prevent
any actual *access*, report any attempts and move on.  It's up to the human
security team to notice any large-scale attempts to access secured files and
question the user and/or their manager(s).
>
Quite agree.  But is the OP looking for a stealth tool that doesn't
get logged?

-- gil

----------------------------------------------------------------------
For TSO-REXX subscribe / signoff / archive access instructions,
send email to LISTSERV@VM.MARIST.EDU with the message: INFO TSO-REXX

----------------------------------------------------------------------
For TSO-REXX subscribe / signoff / archive access instructions,
send email to LISTSERV@VM.MARIST.EDU with the message: INFO TSO-REXX