This portal is to open public enhancement requests against IBM Z Software products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).
We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:
Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,
Post an idea.
Get feedback from the IBM team and other customers to refine your idea.
Follow the idea through the IBM Ideas process.
Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.
IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.
ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.
Due to processing by IBM, this request was reassigned to have the following updated attributes:
Brand - Servers and Systems Software
Product family - Programming Languages
Product - Developer for System z
For recording keeping, the previous attributes were:
Brand - Rational
Product family - Design & development
Product - Developer for System z
This request has been delivered in a previous RDz release.
This RFE is being evaluated for a delivery in a future release.
This requirement has been accepted and will be evaluated for a release within the next two years.
Please see comments posted below
RE: "At DELETE time, it is not obvious that he is selecting a test or production object..."
In this scenario, your users should not be able to delete the production copybooks pulled in via Show Dependencies unless they're RACF authorized. Is it currently not the case?
The current RDz behavior is consistent w/ Eclipse i.e. the pop-up warning is the last line of defense for when someone presses the Del key. If RDz is to change this behavior it will be inconsistent with the platform as well as other toolings built on it. Further, if a user is not RACF authorized, he/she should not be able to delete a resource even if RDz attempts to delete it.
Let us refine our comment on the difference with classic TSO/ISPF where a user voluntary action is required. In RDz the user can "include dependencies" in the MVS subproject. This will add the copybooks from our "production" source library in the project. Some in a single view, the user will then have a mix of sources from the test library (the pgm+copybooks he is working on) and the production library (the dependent copybooks that he has included). At DELETE time, it is not obvious that he is selecting a test or production object. We would like to secure us against such user errors. The suggested "dual security" could be a quick fix solution for us.
I don't think that the author means what screendante talks about. It seems to me that the author wants a "we're about to delete dataset aaa.bbb.ccc etc". Do you really want to delete it? It's too easy to "mis-click" with a mouse and delete a dataset that you didn't mean to.
extra comment from the customer:
With respect to RFE2966, can I just make a suggestion.
One quick solution might be to implement in the RDZ gateway something
similar to CICS bind and link security.
This could implement 2-level security as follows:
- to edit, delete, a dataset or member, a user needs to have the
appropriate authorization in RACF (as now is the case)
- but also the RSE started task must have the same authorization (could
be customization option e.g. RSE_TWO_LEVEL_SECURITY=YES)
In that case, if either the user or RSE stc does not have the required
UPDATE access, the action in RDZ would fail.
This would be fully RACF compliant, and would give us an option to
(easily) reduce the security risk by limiting access to datasets via
the RSE stc.