RE: QTEMP position in library list

Jim I couldn't agree less.

Auditors would not be worth their salt if they aren't first complaining about developers having authority to modify anything in production. If you're talking about a program doing something malicious, the auditors should be replaced with someone who makes sure code is reviewed before moving it into production.

That said, I would tend to agree with Richard. The only legitimate use for QTEMP when it's not at the top of the list would be for storing some kind of data that's not needed after the end of the job. e.g., Some kind of work table, etc. that will simply be rebuilt if the process it's an issue. (Of course, now you've got to have overrides coded to guarantee you're working with the temporary data. Seems like extra work to me. You can't preserve data in QTEMP in case something goes wrong because you have nothing if the job fails as QTEMP and all its contents would go away.

Michael Quigley
Computer Services
The Way international
www.TheWay.org

-----Original Message-----

----------------------------------------------------------------------

message: 1
date: Fri, 1 Jul 2022 09:52:42 -0500
from: Jim Oberholtzer <midrangel@xxxxxxxxxxxxxxxxx>
subject: Re: QTEMP position in library list

Top or Bottom, or somewhere inbetween, entirely depends on the
standards at that development location.
If the developers use QTEMP for what it's meant for, temporary objects that
exist only during the lifetime of the job, and a naming convention that does
not step on other objects, then it really does not matter where it is, pick a
standard and go with it, Consistency is the key.

Now for those of you who like to override production or existing objects by
using QTEMP, has that practice ever been audited? Doubtful, since I highly
doubt it would pass, particularly if you have QTEMP auditing turned off. I can
think of several circumstances where that would lead to the potential for real
damage by a malevolent developer.

In the end it does not matter where you put it, as long as it's consistent.

--
Jim Oberholtzer
Chief Technical Architect
Agile Technology Architects


On Fri, Jul 1, 2022 at 9:38 AM Richard Schoen <richard@xxxxxxxxxxxxxxxxx>
wrote:

Yep - QTEMP - TOP

That's the way it should be or don't use it.

Regards,
Richard Schoen
Web: