I know that for 35 years ir so ;-) But the jcl checker program that suubmits the job for interpretation can read the sysout and perform racf 3rd party checks (under many limitations described by Walt and others). Technically, it is easy to sevelop a program that aubmits a job for interpetation, read the output and call racf to do the checks for the specified user. If combined with irrxutil, a better understanding of how the dataset is protected and a listcat may return the device.
ITschak בתאריך 31 ביול 2017 09:56, "Vernooij, Kees (ITOPT1) - KLM" < kees.verno...@klm.com> כתב: > RACF (and others) are called when the file is opened, so it will check > *then* whether the file is opened for INPUT or for OUTPUT/UPDATE and if > that is allowed. That is why you get a 9*13* abend, from the OPEN SVC. What > the program does after that, is not relevant. > > Kees. > > > -----Original Message----- > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > > Behalf Of Farley, Peter x23353 > > Sent: 28 July, 2017 23:01 > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: JCL Convertor > > > > I would have to somewhat disagree with that position. If a COBOL > > program issues OPEN INPUT for a file, that file *can* be READ by that > > program. If it issues OPEN OUTPUT or OPEN IO then that file *can* > > written to, and possibly also read for the IO case. > > > > You are right about the most general case, but for ITschak's case > > whether a program DOES do read and/or write of a file isn't necessary to > > know, only that it is *possible*. > > > > Other languages have similar syntax markers. It isn't always necessary > > to know everything about a program's logic, only that it has the > > possibility to read or write or both. > > > > Various vendor "software inventory" products do this already. It isn't > > perfect, but it is "good enough" for most purposes. In ITschak's case, > > I also think it will be "good enough" to let his tool at least flag the > > possibility of access / SAF issues. It's still up to the application > > owner to decide if there is an issue or not. > > > > Peter > > > > -----Original Message----- > > From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On > > Behalf Of Jeremy Nicoll > > Sent: Friday, July 28, 2017 4:42 PM > > To: IBM-MAIN@LISTSERV.UA.EDU > > Subject: Re: JCL Convertor > > > > On Fri, 28 Jul 2017, at 21:18, ITschak Mugzach wrote: > > > Just to make sure... It is my understanding that JCL converter & > > > interpreter are only available by job submit and no direct call to > > > these services. My intent is to get the source code from the change > > > management product and look how files are opened. > > > > But you won't be able to tell how files are opened, without looking at > > the program logic... which will require you to read all the program > > parms and > > files, and replicate what the program does. You can't do that... the > > only way to tell what a non-trivial program will do is to run it. > > > > -- > > > > > > This message and any attachments are intended only for the use of the > > addressee and may contain information that is privileged and > > confidential. If the reader of the message is not the intended recipient > > or an authorized representative of the intended recipient, you are > > hereby notified that any dissemination of this communication is strictly > > prohibited. If you have received this communication in error, please > > notify us immediately by e-mail and delete the message and any > > attachments from your system. > > > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > ******************************************************** > For information, services and offers, please visit our web site: > http://www.klm.com. This e-mail and any attachment may contain > confidential and privileged material intended for the addressee only. If > you are not the addressee, you are notified that no part of the e-mail or > any attachment may be disclosed, copied or distributed, and that any other > action related to this e-mail or attachment is strictly prohibited, and may > be unlawful. If you have received this e-mail by error, please notify the > sender immediately by return e-mail, and delete this message. > > Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its > employees shall not be liable for the incorrect or incomplete transmission > of this e-mail or any attachments, nor responsible for any delay in receipt. > Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch > Airlines) is registered in Amstelveen, The Netherlands, with registered > number 33014286 > ******************************************************** > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
