Security access to JOINDEFS/SUMDEFS files
Article ID: 93053
Updated On:
Products
Vantage Storage Resource Manager
Issue/Introduction
Why is ALTER authority needed when we use the Windows Client to delete a JOIN/SUMMARY Object?
Deleting a member only requires UPDATE authority when deleting the member through TSO panels.
Environment
Release:
Component: VANT
Component: VANT
Resolution
ALTER is necessary for DELETE data set. The UPDATE is sufficient, when a member of the data set should be deleted.
However, if a user with UPDATE authority deletes all the members, the effect is more or less the same as if the whole data set is deleted from a user having ALTER authority.
From the security point of view requesting ALTER authority not only simplifies the process, the ALTER is necessary for some actions with the data set, like Archive, Migrate, Move, or Delete. By default this is recommended.
However, if a user with UPDATE authority deletes all the members, the effect is more or less the same as if the whole data set is deleted from a user having ALTER authority.
From the security point of view requesting ALTER authority not only simplifies the process, the ALTER is necessary for some actions with the data set, like Archive, Migrate, Move, or Delete. By default this is recommended.
Feedback
Yes
No
Powered by
