|
View previous topic :: View next topic
|
| Author |
Message |
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007
Posts: 10873
Location: italy
|
|
|
|
| Code: |
| ASSIGN TO "C:\TMP\SAMPIN.TXT" |
do You realize that what You posted is NOT mainframe related ??? |
|
| Back to top |
|
 |
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
| I take it back that part, my only intention was just to know more on "an address file for each environment" term. |
|
| Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix
|
|
|
|
Hello,
The code in the program would be the same for all.
The dataset referenced would vary from one environment to another - preferable by using a symbolic parameter for the dataset name. Hopefully, all of the member names would be the same across environments. |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
| Dick, currently it is in place, but if I use production qualifier in test region then I still be able to send emails and I want to restrict that. |
|
| Back to top |
|
|
Nic Clouston
Global Moderator
Joined: 10 May 2007
Posts: 2455
Location: Hampshire, UK
|
|
|
|
| In a proper establishment your production qualifier woud not even be defined in a test environment and if it was only a very few people should have any access to it at all. |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
Nic, true
but can't change this one go but can suggest to my shop. |
|
| Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix
|
|
|
|
Hello,
I still do not understand why you cannot have multiple addressee files . . .
Is there something preventing the use of multiple addressee files? |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
Dick,
| Quote: |
| I still do not understand why you cannot have multiple addressee files . . . |
Does this mean to have first qualifier different for every region like below?,
Pxyz.abc - production region
#xyz.abc - QA region
Txyz.abc -Dev region
If so then I do have this is in place but the problem is we all have access to access any of the above files in any regions.
for e.g. Pxyz.abc which is a prod region file but still I can access that in QA/DEV. |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6250
Location: Mumbai, India
|
|
|
|
| We're going in circles but possibly, write/modify the program to determine the LPAR and issue a different return code based on the respective LPARs, have multiple email steps in JCL, put condition codes on them to execute specific step for specific LPAR. |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
| Anuj,This is one of the solutions. Thanks. |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6250
Location: Mumbai, India
|
|
|
|
| Good Luck! |
|
| Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix
|
|
|
|
Hello,
| Quote: |
| the problem is we all have access to access any of the above files in any regions. |
Then there is basically no security in place at all. . .
Suggest this is or will become a major issue over time . . . |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
| Quote: |
| Then there is basically no security in place at all. . . |
Yes
| Quote: |
| Suggest this is or will become a major issue over time . . . |
Very true, I suggested that already, and Thanks all. |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
Dick, But the reason of having this in place could for the production support people.
Like when I used to get queries of production regions many be for preparing some sort of reports then I need to have access to prod files in dev region otherwise its a big process to get all the approvals done. |
|
| Back to top |
|
|
Bill Woodger
Moderator Emeritus
Joined: 09 Mar 2011
Posts: 7309
Location: Inside the Matrix
|
|
|
|
| One list of e-mails for each "environment". If particular e-mails appear in more than one place, no problem. |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6250
Location: Mumbai, India
|
|
|
|
| Rohit Umarjikar wrote: |
Dick, But the reason of having this in place could for the production support people.
Like when I used to get queries of production regions many be for preparing some sort of reports then I need to have access to prod files in dev region otherwise its a big process to get all the approvals done. |
Well, if you're working for a Bank and one has his Credit (Crad) Account in that, this set-up sounds scary. Though for a non-financial institutes, it might "still be workable" but not very encouraging. |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
| Quote: |
| Well, if you're working for a Bank and one has his Credit (Crad) Account in that, this set-up sounds scary. Though for a non-financial institutes, it might "still be workable" but not very encouraging. |
Actually, Yes and true. There should be a purpose for it. I don't know how other shops have configurations. As if you want to prepare some report from prod data then how does that work actually? |
|
| Back to top |
|
|
Nic Clouston
Global Moderator
Joined: 10 May 2007
Posts: 2455
Location: Hampshire, UK
|
|
|
|
| Where I was "brought up" only OPC had access to update production data and production support users had read access. Developers had to submit signed-off jobs to be added to the OPC schedule. Production data stayed in the production machine room except for extracts that went to the Information Centre's machine - as read only. |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
Nic, True. and same logic goes everywhere. So our shop might do this in nearer future.  |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6250
Location: Mumbai, India
|
|
|
|
| Rohit Umarjikar wrote: |
| Actually, Yes and true. There should be a purpose for it. I don't know how other shops have configurations. As if you want to prepare some report from prod data then how does that work actually? |
Usually such reports would be used by Business Partners, if they need it and access-policies for Prod-data are in place - they will grant the access to get the appropriate report -- that's the baseline, though, how do they implement it is a different story at different shops. |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
| True, so over all conclusion is to have no access to prod files unless you get necessary approvals for the respective files unlike in my shop have granted access to every file I work with. |
|
| Back to top |
|
|
enrico-sorichetti
Superior Member
Joined: 14 Mar 2007
Posts: 10873
Location: italy
|
|
|
|
| Quote: |
| so over all conclusion is to have no access to prod files unless you get necessary approvals. |
completely wrong concept ...
whatever the data
YOU SHOULD GRANTED ACCESS ONLY TO THE DATA YOU WILL NEED TO DO THE JOB RELATED TO YOUR POSITION.
holds for any organization ..
HR has no need to see general ledger data
accounting has no need to meddle with HR data
...
...
...
seems that somebody in Your organization is completely unaware of process and data management
 |
|
| Back to top |
|
|
Rohit Umarjikar
Global Moderator
Joined: 21 Sep 2010
Posts: 3053
Location: NYC,USA
|
|
|
|
| Quote: |
HR has no need to see general ledger data
accounting has no need to meddle with HR data |
| Quote: |
| seems that somebody in Your organization is completely unaware of process and data management |
Could be true but, very often we need to access prod data for day to day work and then it comes repeatative work to get access every often. and if right time approvals are not there then thre could be delay in the work or response. |
|
| Back to top |
|
|
Anuj Dhawan
Superior Member
Joined: 22 Apr 2006
Posts: 6250
Location: Mumbai, India
|
|
|
|
| Time to kill this thread!? |
|
| Back to top |
|
|
dick scherrer
Moderator Emeritus
Joined: 23 Nov 2006
Posts: 19244
Location: Inside the Matrix
|
|
|
|
Sure . . .
And done  |
|
| Back to top |
|
|
|
|
