IBM Z Hardware and Operating Systems Ideas Portal


This is the public portal for all IBM Z Hardware and Operating System related offerings. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Future consideration
Workspace z/OS
Categories RACF
Created by Guest
Created on Mar 16, 2020

RELATED IDEAS

Callable service to query userid active/revoked status

Provide a callable service, possibly as a new function to r_admin to query a userid's active/revoked status. The status should take into account the user's-
- Explicit revoked status
- System inactive interval and last access, if not a special user
- Last user access
- Revoke date
- Resume date

The r_admin extract of a user profile, function ADMN_XTR_USER, does provide the user active/revoked status in field REVOKEFL. The value of the REVOKEFL field is documented to be consistent with the behavior of the LISTUSER command, in that it takes revoke and resume dates into account when determining if the user is revoked. It is not documented if the system inactive interval is also taken into account (and I think it should be documented if it is, or not). However there is a lot of processing performed to extract and return data, which must then be processed to locate the REVOKEFL field, that is unnecessary when all you need is the active/revoked status for the user.

Idea priority High
  • Guest
    Reply
    |     Apr 14, 2020

    Thank you for submitting this requirement. Have you considered calling RACROUTE REQUEST=VERIFY with PASSCHK=NO to determine the revoke status?

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.