IBM System Storage Ideas Portal
Hide about this portal


This portal is to open public enhancement requests against IBM System Storage products. To view all of your ideas submitted to IBM, create and manage groups of Ideas, or create an idea explicitly set to be either visible by all (public) or visible only to you and IBM (private), use the IBM Unified Ideas Portal (https://ideas.ibm.com).


Shape the future of IBM!

We invite you to shape the future of IBM, including product roadmaps, by submitting ideas that matter to you the most. Here's how it works:

Search existing ideas

Start by searching and reviewing ideas and requests to enhance a product or service. Take a look at ideas others have posted, and add a comment, vote, or subscribe to updates on them if they matter to you. If you can't find what you are looking for,

Post your ideas

  1. Post an idea.

  2. Get feedback from the IBM team and other customers to refine your idea.

  3. Follow the idea through the IBM Ideas process.


Specific links you will want to bookmark for future use

Welcome to the IBM Ideas Portal (https://www.ibm.com/ideas) - Use this site to find out additional information and details about the IBM Ideas process and statuses.

IBM Unified Ideas Portal (https://ideas.ibm.com) - Use this site to view all of your ideas, create new ideas for any IBM product, or search for ideas across all of IBM.

ideasibm@us.ibm.com - Use this email to suggest enhancements to the Ideas process or request help from IBM for submitting your Ideas.

Add a new idea Subscribe
Status Future consideration
Workspace Storage Protect Family
Categories Spectrum Protect (Server)
Created by Guest
Created on Feb 20, 2020

RELATED IDEAS

Spectrum Protect Data Retention - restrict interaction with node data to node user

See this idea on ideas.ibm.com

We use Spectrum Protect whit Data Retention enabled to store archive data.
nobody besides the application should be able to delete single files that are stored in spectrum protect. We work with event based retention. If the event is set from the application, the data must be deleted as soon as possible.
With "Archive Retention Protection: On" set, everything is well implemented for all commands like 'delete filespace . .'.
The data is protected. An administrator cannot destroy client data from the command line (dsmadmc).

But: If the spectrum protect administrator configures a dsm.sys to connect as the client and sets his credentials (username and password) whilst connecting to the server -> he is capable to set an event what is equal to delete a file with the next expire inventory run.

The thing is: if the client asks for the client-ID and password. I think in a data protected environment the server should decline the acccess if an administrator gives his credentials instead of the client node.

Idea priority Medium
  • Guest
    Reply
    |     Feb 21, 2020

    This request may not be delivered within the release currently under development, but the theme is aligned with the current multi-year strategy. IBM may consider and evaluate any RFE Community feedback for this request through activities such as voting. IBM will update this request in the future.

  • Guest
    Reply
    |     Feb 21, 2020

    Waouuhh, this is a security issue...

By clicking the "Post Comment" or "Submit Idea" button, you are agreeing to the IBM Ideas Portal Terms of Use.
Do not place IBM confidential, company confidential, or personal information into any field.