View previous topic :: View next topic
|
Author |
Message |
sabar
New User
Joined: 23 Jan 2006 Posts: 1
|
|
|
|
Hi ALL
Could you please tell me f someone could change my member in PDS without showing his user id ? and is it possible if he use virtual machine to access mainframe? and how i can know if someone change a member in PDS even it showing my user id? |
|
Back to top |
|
|
dbzTHEdinosauer
Global Moderator
Joined: 20 Oct 2006 Posts: 6966 Location: porcelain throne
|
|
|
|
since you (anyone with update authority) can change the user id attribute of a member of a pds to virtually anything
via the ISPF option 3.5
it is a waste of time to expect any type of control over pds's via the user id.
Quote: |
virtual machine to |
what do that mean?
either someone has mainframe access (via internet, direct hard connection, whatever)
or someone does not. |
|
Back to top |
|
|
Robert Sample
Global Moderator
Joined: 06 Jun 2008 Posts: 8697 Location: Dubuque, Iowa, USA
|
|
|
|
PDS statistics, including user id, are generated and maintained by ISPF within TSO. If you don't use ISPF to update the PDS member, then most likely the user id that made the change would not be recorded -- no matter where the changes came from.
And unless you -- or someone -- analyzes the SMF data (which in itself is NOT a trivial task unless your site uses one of the SMF analysis tools such as MXG), it is not possible in general to know if someone changed a PDS member. If this is a concern of yours, you need to talk to your site security group about restricting access to that PDS. When there's a good business reason for doing so, site security groups usually have no problems with making such changes. |
|
Back to top |
|
|
Pandora-Box
Global Moderator
Joined: 07 Sep 2006 Posts: 1592 Location: Andromeda Galaxy
|
|
|
|
As far as security is concerned it is a bad way
I have seen places where the last modified person gets all bashing (Which was against his knowledge) for some bad codes written initially created by him or her as reviewer would blindly by userid
Why bother who did this / that when they cant modify?
Just a thought |
|
Back to top |
|
|
|