Access listing for an ID



All about SAF, RACF, encryption, Firewall, Risk assessment and integrity concepts

Re: Access listing for an ID

Postby Robert Sample » Fri Mar 30, 2012 7:10 pm

Started tasks may be in the ICHRIN03 started procedures table in RACF. You haven't mentioned anything about using the started procedures table yet, but you certainly should be investigating it at your site.

If you have no documentation, your best bet -- if you are allowed to -- would be to dump the RACF data base into a sequential file and look at the 0404 and 0400 record types for data set protection. The data set names being protected would give you some idea what naming standards are in use at the site. If you need to look at the FACILITY classes, the 0505 and 0500 records would have that data.
Robert Sample
Global moderator
 
Posts: 3367
Joined: Sat Dec 19, 2009 8:32 pm
Location: East Dubuque, Illinois
Has thanked: 1 time
Been thanked: 222 times

Re: Re: Access listing for an ID

 

Re: Access listing for an ID

Postby v1gnesh » Fri Mar 30, 2012 7:22 pm

Robert Sample wrote:Started tasks may be in the ICHRIN03 started procedures table in RACF. You haven't mentioned anything about using the started procedures table yet, but you certainly should be investigating it at your site.

If you have no documentation, your best bet -- if you are allowed to -- would be to dump the RACF data base into a sequential file and look at the 0404 and 0400 record types for data set protection. The data set names being protected would give you some idea what naming standards are in use at the site. If you need to look at the FACILITY classes, the 0505 and 0500 records would have that data.


v1gnesh wrote:Hi!

I need to find to which profiles a particular ID(similar to STCUSER) has access to..

How do i do this in
  • RACF
  • ACF2

Thank you!


Correct me if I'm wrong but I did mention that it would be an STC ID.

Thanks for the suggestion. I will unload the database and have a look. Is it not possible to list the dataset/generic profiles the IDs have access to via RACF panels..? I'm more worried about the ENQ level security thats been setup. Not sure how to proceed with that..
boyo
v1gnesh
 
Posts: 72
Joined: Wed Sep 28, 2011 8:24 pm
Has thanked: 1 time
Been thanked: 0 time

Previous

Return to Mainframe Security

 


  • Related topics
    Replies
    Views
    Last post