On Mon, 5 Oct 2009 18:28:35 -0500, Rick Fochtman wrote:
>>
>>>But you still need to prevent testers from submitting jobs with a
>>>production USERID. We used a TSO exit to remove USER/PASSWORD parms from
>>>the JOB statement. Got a better idea?
>>>
>>Change the password?
>>
>We did. Our Production Support staff and our automation product had
>SURROGAT authority but the production password was a closely guarded
>secret, known only by me.
>
???  Testers didn't have SURROGAT (I assume they weren't Production
Support, and didn't have access to automation), and they didn't
know the production password?  How were they bypassing?

-- gil

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to