Re: Library Authority
Mike <[email protected]> Mon, 18 Aug 2008 11:29:45 -0500
| Newsgroups | gmane.comp.systems.as400.security |
|---|---|
| Message-ID | <[email protected]> |
I realize all of that, but in this case we are doing this because we have users browsing the database and asking "What is ACMASTP for?" and all around using Crystal Reports to query files that they have no business looking into. We just want to give them a library for only the files, fields and records they are allowed to query. There is a business reason to allow the queries so we can't just cut the cord on it. These logicals are NOT mission critical and are not backed up in the daily backup. The source is backed up and can be recreated easily upon DR (only a several thosand records in each file). I do think that this information is really needed in this thread so future people looking at doing this know the impact of what they are looking at doing. I don't want to discount what you have said, but in my case it is a non-issue. -- Mike Wills Midrange Programmer/Analyst Sick of corporate radio and hungry for something new? http://thenextgenerationofradio.com Stalking me? http://twitter.com/MikeWills | http://friendfeed.com/mikewills On Mon, Aug 18, 2008 at 10:50 AM, CRPence <CRPbottle-/[email protected]> wrote: > Such a response ignores the true potential for stress that might be > involved. The noted processing may be unacceptable to businesses for DR > with large files, since doing so could add several tens of hours for > access path recovery time. Without proper planning, applications may be > unavailable for days while critical activity competes with rebuilds for > CPU time, or while rebuilds are given dedicated time thus preventing > activation of other processing that is critical to the business. While > it may be workable for your situation, that does not make it generally > applicable to others. Many will never even test DR to find out that > they will be SOL when the time comes for a real DR, so implying it is > acceptable without emphasizing the potential caveat will leave them > disgusted with the OS and possibly with the /advice/ they were given. > > The IBM i Operating System 6.1 offers some new techniques which > enable spanning libraries without access path rebuilds, but only with > explicit modifications to the DR processing. > > Regards, Chuck > > [email protected] wrote: > > Personally I don't find the separate library thing such a big hassle. > > 1 - Name the LF library higher in the alphabet than the pf library. > > So if your PF library was MYLIBF then name your lf library MYLIBFLF. > > Then in a complete unload/reload the PF's will all be there. > > 2 - If someone violates this, or if they do stuff like have a LF in > > LIBA pointing to a PF in LIBB and a LF in LIBB pointing to a PF in > > LIBA then I still wouldn't stress out. When restoring I simply do a > > second RSTLIB *NONSYS with the OPTION(*NEW). There's even some > > obscure reference to this in the Backup and Recovery Guide. Having > > done an unload/reload within the last month it was no problem. > > > > I've got real issues to get stressed over instead of being concerned > > with cross library logicals. > > > > Hey, if my boss found that easy solution, and he hasn't written a > > program in way over a decade... > _______________________________________________ > This is the Security Administration on the AS400 / iSeries (Security400) > mailing list > To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] > To subscribe, unsubscribe, or change list options, > visit: http://lists.midrange.com/mailman/listinfo/security400 > or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] > Before posting, please take a moment to review the archives > at http://archive.midrange.com/security400. > > _______________________________________________ This is the Security Administration on the AS400 / iSeries (Security400) mailing list To post a message email: Security400-Zwy7GipZuJhWk0Htik3J/[email protected] To subscribe, unsubscribe, or change list options, visit: http://lists.midrange.com/mailman/listinfo/security400 or email: Security400-request-Zwy7GipZuJhWk0Htik3J/[email protected] Before posting, please take a moment to review the archives at http://archive.midrange.com/security400.