This portal is to open public enhancement requests against products and services offered by the IBM Data & AI organization. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).
Shape the future of IBM!
We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:
Search existing ideas
Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updateson them if they matter to you. If you can't find what you are looking for,
Post your ideas
Post ideas and requests to enhance a product or service. Take a look at ideas others have posted and upvote them if they matter to you,
Post an idea
Upvote ideas that matter most to you
Get feedback from the IBM team to refine your idea
Specific links you will want to bookmark for future use
DSNZPARM to disable MODIFY option DELETEDS - compliance issue
It should be possible to disable the option for deleting physical datasets along with modifying recovery information for a tablespace, as in
MODIFY RECOVERY TABLESPACE XXXXXX.XXXXXXXX
DSNUM ALL DELETE AGE(32) DELETEDS
There is increasingly more focus on compliance, including separation of duties. In our shop we strive to ensure that the same user should not be able to both drop a table and delete image copy data sets. That would make the system vulnerable for inside adversaries.
It is possible using RACF to prevent alter access to image copy data sets for everybody except program DSNUTILB. In this way we can prevent e.g. a DBA from directly deleting an image copy. But the DBA can do the same running MODIFY RECOVERY DELETEDS.
We would like a way to disallow use of option DELETEDS, e.g. via a new DSNZPARM.
Do not place IBM confidential, company confidential, or personal information into any field.