Skip to Main Content
IBM System Storage Ideas Portal


This portal is to open public enhancement requests against IBM System Storage products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas
  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Status Delivered
Created by Guest
Created on Mar 19, 2021
Merged idea

This idea has been merged into another idea. To comment or vote on this idea, please visit CSM-I-49 CSM - Change dual access control options.

Granular CSM Dual Control Merged

We would like to enable dual control for destructive task, but not for all task. For example, deleting a safeguarded copy, altering a replication session contents, etc. should be under dual control. Would it be possible when enabling dual control to allow(two) admins to select/deselect a checkbox or radio button to pick and choose which dual control options are in place?

Idea priority Medium
  • Guest
    Reply
    |
    Mar 22, 2021

    This is a duplicate of RFE http://www.ibm.com/developerworks/rfe/execute?use_case=viewRfe&CR_ID=138176 Please add you votes to that RFE for this requested feature.

    With that said, you are correct that Dual Control locks down most of the fuctionality on the server. We have had a hard time really coming up with a design that could allow for only "some" actions to be dual control enabled. Let's take your example of an operator simply resuming replication due to a communication error. The issue there is that "resuming" replication can in itself be a destructive action, and CSM has no way to tell whether it is or not. The secondary site would have consistent data from which a customer could recover from, but issuing a start command simply to restart replication, could in fact be used to overwrite that consistent data with corrupted data on the primary. So determining the right level of control or in this case right level to disable dual control is tricky without opening up the ability for a malicious user to cause damage. We could go the route of letting the customer choose the risks they are willing to take, but the concern is that customers might not understand all the risks and it wouldn't be clear if we provided the flexibility. But we're more than happy to discuss this further with you to see if you can think of a good balance that protects the customer while providing the flexibility you desire.

    Please comment in RFE 138176 for further communication.