The dataset must be readable from both of our LPAR's. Gadi
-----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Veilleux, Jon L Sent: Tuesday, December 28, 2010 4:03 PM To: IBM-MAIN@bama.ua.edu Subject: Re: Retricting jobs that use a certain DDNAME, certain DSNAME to a groups of classes Is it out of the question to put the dataset on a non-shared volume, or is it necessary to be able to read from any system? -----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Richards, Robert B. Sent: Tuesday, December 28, 2010 7:54 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Retricting jobs that use a certain DDNAME, certain DSNAME to a groups of classes Gadi, Are all jobs running against this dataset run from a controlled library or can anyone run an adhoc job from their own JCL libraries? There are a variety of ways your goals can be accomplished but they entail, as a minimum, either clamping down on who can access the dataset (use RACF access authority) or compound conditions that need to be met to allow for update activity, or both. The issue here is control. I do not know what other tools you have at your disposal, but if it were me, I'd investigate all jobs that can potentially corrupt the dataset, put them in a controlled library, lock access with RACF and even use a previous step whose condition must be satisfied in order for the update step to execute. Maybe insist on system affinity and update only from one lpar as well. Just a few ideas. Bob -----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of ??? ?? ??? Sent: Tuesday, December 28, 2010 7:27 AM To: IBM-MAIN@bama.ua.edu Subject: Re: Retricting jobs that use a certain DDNAME, certain DSNAME to a groups of classes Hi, This file is not SMS managed and the job name is not known. Gadi -----Original Message----- From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On Behalf Of Doron Geva Sent: Tuesday, December 28, 2010 2:20 PM To: IBM-MAIN@bama.ua.edu Subject: Re: Retricting jobs that use a certain DDNAME, certain DSNAME to a groups of classes Gadi, To my knowledge, in OPS you can trap the file's allocation message (if the file is sms managed) or if the job name is known trap message $HASP373 or IEF403I and cancel the job as it is beginning Doron On Tue, Dec 28, 2010 at 13:46, גדי בן אבי <gad...@malam.com> wrote: > Hi, > > The reason for this request is that the specified DSNAME is a VSAM KSDS. > Many jobs read the file, and some update it. > Sometimes, about once a year, a job running on the 'wrong' LPAR > updates the file, and corrupts it. > The corruption is not immediately apparent, and may be discovered days > or weeks after it happens. > The jobs accessing the file are both production (scheduled) jobs and > one time, ad hoc jobs. > > We have access to OPS, if that may help. > > Gadi > > -----Original Message----- > From: IBM Mainframe Discussion List [mailto:ibm-m...@bama.ua.edu] On > Behalf Of John McKown > Sent: Tuesday, December 28, 2010 1:40 PM > To: IBM-MAIN@bama.ua.edu > Subject: Re: Retricting jobs that use a certain DDNAME, certain DSNAME > to a groups of classes > > Have fun writing an exit. By LPAR, I assume you mean a specific z/OS > image (&SYSNAME. or SMFID), an not a specific hardware LPAR name. But > I guess either is possible. Now, which exit? Well, IEFUJV or IEFUSI comes to > mind. > But what about if somebody gets clever and used DYNALLOC? Is this for > a specific program? How about using RACF to restrict who can run the > program itself? > > Or is this more of a scheduling thing, as in: When a job is submitted > and contains the specific DD name and DSNAME combination, make sure > that the system routes its execution to a specific MAS node? In JES2, > this would be setting the SYSAFF. In this case, you might be able to > use JES2 exit 6 (converted exit), look at the internal text, and set > the SYSAFF in the JES2 control block for the job. I don't know which control > block. > > > On Tue, 2010-12-28 at 13:05 +0200, > גדי בן אבי wrote: > > Hi, > > > > I have the following request: > > Check if a job uses a certain DD, and that DD references a certain > DSNAME, make sure that the job runs on a specified LPAR. > > > > Thanks > > > > Gadi > > > > ________________________________ > <לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או > מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, > הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך > כאמור (לרבות מסמך > סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום > טיוטה לדיון, <ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. > > > > > > Please note that in accordance with Malam's signatory rights, no > > offer, agreement, concession or representation is binding on the > > company, > unless accompanied by a duly signed separate document (or a scanned > version thereof), affixed with the company's seal. > > > > -------------------------------------------------------------------- > > -- For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@bama.ua.edu with the message: GET IBM-MAIN > > INFO Search the archives at > > http://bama.ua.edu/archives/ibm-main.html > -- > John McKown > Maranatha! <>< > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > > לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או > מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, > הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך > כאמור (לרבות מסמך > סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום > טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. > > > Please note that in accordance with Malam's signatory rights, no > offer, agreement, concession or representation is binding on the > company, unless accompanied by a duly signed separate document (or a > scanned version thereof), affixed with the company's seal. > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, send > email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO > Search the archives at http://bama.ua.edu/archives/ibm-main.html > -- בברכה *דורון גבע* - 054-4974548 doron.geva...@gmail.com Regards Doron Geva - +972-54-4974548 doron.geva...@gmail.com לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html לשימת לבך, בהתאם לנהלי החברה וזכויות החתימה בה, כל הצעה, התחייבות או מצג מטעם החברה, מחייבים מסמך נפרד וחתום על ידי מורשי החתימה של החברה, הנושא את לוגו החברה או שמה המודפס ובצירוף חותמת החברה. בהעדר מסמך כאמור (לרבות מסמך סרוק) המצורף להודעת דואר אלקטרוני זאת, אין לראות באמור בהודעה אלא משום טיוטה לדיון, ואין להסתמך עליה לביצוע פעולה עסקית או משפטית כלשהי. Please note that in accordance with Malam's signatory rights, no offer, agreement, concession or representation is binding on the company, unless accompanied by a duly signed separate document (or a scanned version thereof), affixed with the company's seal. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
