Yes indeed, if an unwashed user can update the member passed to RDR then all 
bets are off.

I would guess that if anything the "STC userid" would likely have more access 
than was desirable.

I am not proposing this as a universal solution; I am proposing it as MY 
solution.

Charles


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Tom Brennan
Sent: Thursday, November 19, 2020 11:14 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: Is there a JES2 command to submit a job?

So if the JCL dataset can be updated by the user and they decide to 
remove the USER= parm, then the STC userid would get control.  And in 
that case the unique userid set up for that STC would have little access 
and would likely fail on the first dataset.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to