Roles and Trusted Context

During the SHARE conference in Orlando, I was standing in the vendor hall having a discussion with someone about DB2 security. This person told me how his company implemented roles and trusted context to give DBAs SYSADM capabilities without granting them SYSADM authority. I found this very interesting, because I've not heard of many companies implementing roles and trusted context.

I was telling this person how unusual this is, and expressing my belief that a lack of information is the cause. Implementing roles hasn't really been presented in a way that people can understand, so few see the value.

Funny then that shortly after I got back from Orlando, I received notification of a new IBM Redbooks publication, "Security Functions with DB2 10 for z/OS."

This publication, which is currently in draft form, includes information on roles and trusted context. Chapter 4 examines some challenges roles and trusted context can help solve and then provides details to implement the solution. The challenge of granting SYSADM is mentioned in chapter 4.5 ("example of local trusted context, securing DBA activities").

Specific to DB2 10, I noticed only minor updates concerning roles and trusted context. The most significant change is the new SECADM authority. Users will need this authority to manage roles and trusted context. Other related changes involve classifying row permission, column mask and role and trusted context as security-related functions.

What I love about Redbooks publications is that you get real people presenting real problems and providing real-life solutions. For anyone working with DB2 for z/OS -- whether you're a developer, DBA or security administrator -- I highly recommend taking the time to review how security works. This particular publication is a good start.

 

zNextGen Free Mainframe Education

Last week I wrote about SHARE and mentioned the zNextGen (zNG) project, which provides a networking vehicle for young mainframe professionals.

Attending SHARE conferences isn't a requirement for membership. To become an zNG member, register here.

zNG members receive access to the free mainframe online courses at Interskill.

•    To receive a new user ID/password, e-mail [email protected] and mention your zNG membership. Once confirmed, your user name and password will be sent to you.
•   Go here to log in and start your 12 free courses
•    Contact Darren Surch ([email protected]) if you have an expired user ID/password.

zNextGen Curriculum            
o    Assembler Introduction  
o    COBOL Programming: Basics  
o    Introduction to the CICS Transaction Server  
o    Introduction to the IBM Enterprise Environment  
o    Introduction to the REXX Programming Language  
o    JCL (z/OS): Introduction to z/OS JCL 1.11  
o    SDSF Concepts and Facilities  
o    Unicenter CA-OPS/MVS II: Event Automation Concepts and Components  
o    Using Online System Facilities: TSO/ISPF 1.11  
o    VSAM Utilities  
o    z/OS Architecture 1.11  
o    z/OS Concepts and Components 1.11

Heading to SHARE

I'll be on hand for the SHARE conference in Anaheim, Calif., from Feb. 27 to March 4.

Despite SHARE's relevance to the mainframe world, I actually hadn't attended a conference in many years until I went to the one in Boston last summer.

I enjoyed that conference because I got a chance to see old friends from the DB2 community. I also made plenty of new friends between networking with folks in different areas of z/OS management and talking to young professionals involved in the zNextGen Project.

At the Anaheim conference, SHARE is specifically organizing sessions on these topics:

• Using zEnterprise to deliver value while reducing the cost of managing your data center.

• Virtualization to make better use of existing resources.

• Virtualization as a cost-effective approach to delivering new services.

• Security and privacy practices that keep you compliant and that avoid compromise costs.

• Effective application technologies and architectures that deliver timely business solutions.

Since my primary interest is DB2 (surprise), I searched and found that this conference will have 74 DB2 sessions.

If you're going to the conference, here are a few DB2 sessions you won't want to miss:

• 8356 -- DB2 10 performance topics (Roger Miller, IBM)

• 8786 -- IBM Smart Analytics Optimizer for DB2 for z/OS: How Does it Work? (Willie Favero, IBM)

• 8789 -- The DB2 Catalog Has Come a Long Way Since 1983 (Favero)

• 8823 -- Comparing and Contrasting XML Features of DB2 and COBOL: When to Use Which One? (Tom Ross, IBM)

Roger and Willie are simply two of the best speakers you'll ever hear. And as one who's written extensively about XML and COBOL, I'm also looking forward to Tom's presentation on that topic. It's good to see IBM involved in this area.

If you're attending SHARE, please stop by and say hello. I'll be at CA Technologies booth showing off my new product, Chorus.