John and Mark: Thank you for your comments. On Wed, Aug 25, 2010 at 9:55 AM, Mark Zelden <mzel...@flash.net> wrote:
> No, the exit will not get called again after conversion of the JCL. But > you > can protect the ability to change the class via operator commands or > products like SDSF with external security (RACF/ACF2/Top Secret). > > For example, in the OPERCMDS class you would protect > > JES2.MODIFY.BAT > > See the JES2 Init and Tuning for more details. > > Regards, > > Mark > -- > Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS > mailto:mzel...@flash.net > Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html > Systems Programming expert at http://expertanswercenter.techtarget.com/ > > > On Wed, 25 Aug 2010 08:28:32 -0400, Roberto Halais > <roberto.hal...@gmail.com> wrote: > > >Using Mark's idea. > > > >I have a question. > > > >Once the job gets authorized by the exit to proceed what would happen if > the > >operator decides to change the job class. Will the exit reenter again or > is > >there another exit we have to code? > > > >Thank you for you replies. > > > > > > > >On Tue, Aug 24, 2010 at 5:29 PM, Mark Zelden <mzel...@flash.net> wrote: > > > >> On Tue, 24 Aug 2010 15:22:20 -0500, Ward, Mike S <mw...@ssfcu.org> > wrote: > >> > >> >Hello all, I'm asking for a little help. I would like to keep TSO users > >> >from submitting jobs using class P. I am looking through the Jes2 > exits, > >> >but I'm not sure which one to choose. If someone could point me in the > >> >right direction I would appreciate it. Also if anyone has a sample or > >> >knows where I can get one it would save reinventing the wheel. > >> > > >> > > >> > >> I've done it in EXIT 6, but it could be done in EXIT 2 / 52 also. My > exit > >> made calls to an installation defined RACF class ($EXIT or some such) to > >> see if the user was authorized to submit in that class. FACILITY could > be > >> used > >> also. > >> > >> Not that TSO SUBMIT exit is not a good solution for this as it is very > easy > >> to > >> code a sysout to INTRDR, write to it and bypass the submit exit (or > >> allocate > >> INTRDR to your TSO session). > >> > >> Mark > >> -- > >> Mark Zelden - Zelden Consulting Services - z/OS, OS/390 and MVS > >> mailto:mzel...@flash.net > >> Mark's MVS Utilities: http://home.flash.net/~mzelden/mvsutil.html > >> Systems Programming expert at http://expertanswercenter.techtarget.com/ > >> > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > -- "It is no measure of health to be well adjusted to a profoundly sick society." -Krishnamurti "I am as you, in you, for you. One as you in all, as all, forever. My call is your call." ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
