On Wed, 14 Oct 2009 10:45:47 +0200, Mike Shorkend <mike.shork...@gmail.com>
wrote:

>AFAIK, It is the submitter. I tried issuing a protected(via RACF OPERCMDS
>class) command from a job submitted by an unauthorized user and it failed
>with a ICH408I message.

Commands contained within a job's JCL should run as though issued by the
execution user ID (not necessarily the same as the submitting user ID).

-- 
Walt Farrell, CISSP
IBM STSM, z/OS Security Design

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to