Restore a USER or GROUP that is in the process of being deleted

Products

• IDMS
• IDMS - Database

Issue/Introduction

In an IDMS system, USERs and GROUPs can be defined in the catalog for internal security validation. They can be added and deleted. The deletion is a multi-step process.

If the delete process has been started but not completed, is it possible to restore their functionality?

Environment

Release: All supported releases.

Resolution

The process to delete a USER or GROUP from an IDMS system is three steps:

1. DROP USER/GROUP in OCF or with an IDMSBCF job. 
2. Run SDEL. 
3. DROP USER/GROUP again.

If it is realized after the first DROP step that it was done in error, or that the wrong USER or GROUP was deleted, it is possible to effectively restore the USER or GROUP. There is no way to undo the deletion, or to reverse that process. That USER or GROUP is now considered "logically deleted" and when SDEL runs it will delete all privileges associated with the USER or GROUP.

However, if you do the second DROP and then CREATE USER/GROUP again before the SDEL, the new definition will automatically re-inherit all of the privileges granted to the USER or GROUP originally. That will save the time and effort of re-granting all of desired privileges.

Additional Information

Syntax for adding and deleting USERs and GROUPs can be found at Syntax for Securing Global Resources.