Elardus, thank you for correcting my mispelling, I meant TSUINRDRD. As for the papers I'm referring to:
March 1998 - RACF Newsletter #44 (Stu Henderson) : "Early documentation for the JESINPUT class described rules to control access to your system through TSO signons (TSUINRDR) and through the started task internal reader (STCINRDR). But JES does not make use of these rules. I just found somethng more recent (April 2009 - RSH RACF Tips) : "JESINPUT issues a default return code of 8. If no profile covers a POE, no access is allowed. (Exception: authorization is never checked for TSUINRDR or STCINRDR.)" May be I miss some sublety in the English semantics here. Or is it really meaning that no authorization check is done ? Following your suggestion to run trials: if I were to test access control checking for TSUINRDR, what would be in your mind the userID I should specify in the access list ? Would it be my TSO userID ? Thanks a lot. On Mon, 21 Feb 2011 08:26:00 -0600, Elardus Engelbrecht <elardus.engelbre...@sita.co.za> wrote: >Patrick Kappeler wrote: > >>Hello - I'm trying to find out where the userID to specifiy in the access >>list of >STCINRDR and STUINRDR, in the JESINPUT class, is coming from. And I actually >have problems figuring out. > >You are probably referring to TSUINRDR, not STUINRDR... > >To specify userid in access list you need to do these example commands: > >RDEFINE JESINPUT source-name UACC(NONE) >PERMIT source-name CLASS(JESINPUT) ID(user-or-group) ACCESS(READ) >SETROPTS CLASSACT(JESINPUT) REFRESH > >>I read some papers of well known members of this list, and members of the >RACF-L one as well, stating that there is actually no authorization checking >done for these resources. > >Where did you see that 'no authorization checking'? Did you some testing? > >Groete / Greetings >Elardus Engelbrecht > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO >Search the archives at http://bama.ua.edu/archives/ibm-main.html ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@bama.ua.edu with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
