Gadi, Please tell us more about your environment and the jobs. Do you run JES2 or JES3? If JES2, does each LPAR have its own spool and nodename or are all the LPARs using a MAS shared spool with a single nodename? What security software do you use (e.g., RACF)? Do all the LPARs share the same security software database? Are all the jobs that perform updates a known, fixed set, and are they all submitted by your job scheduler? Can these jobs be assigned a unique USERID that is different than those assigned to jobs that simply read the file? Are the programs used to update the file a known, fixed set?
Regards, Bob Robert S. Hansel Lead RACF Specialist RSH Consulting, Inc. 617-969-8211 www.linkedin.com/in/roberthansel www.rshconsulting.com --------------------------------------------------------------------- 2011 RACF Training > Intro & Basic Admin - WebEx - JAN 24-28 > Securing z/OS Unix - WebEx - FEB 8-10 > Audit for Results - Boston - APR 12-14 > Intro & Basic Admin - Boston - MAY 10-12 Visit our website for registration & details --------------------------------------------------------------------- -----Original Message----- Date: Tue, 28 Dec 2010 13:05:29 +0200 From: =?windows-1255?Q?=E2=E3=E9_=E1=EF_=E0=E1=E9?= <gad...@malam.com> Subject: Retricting jobs that use a certain DDNAME, certain DSNAME to a groups of classes Hi, I have the following request: Check if a job uses a certain DD, and that DD references a certain DSNAME, make sure that the job runs on a specified LPAR. Thanks Gadi ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html