On Wed, 6 May 2020 16:58:59 -0400, David Spiegel wrote: >+1 +1 > >On 2020-05-06 16:43, Frank Swarbrick wrote: >> Are you still wanting to limit "non OPER" users to only those jobs beginning >> with their user ID? If so, for gods sake why? Sounds very 1960s... >> And how do you prevent their foiling the scheme by writing JCL to INTRDR to bypass the TSO EXIT?
>> ________________________________ >> From: of Robert Hahne >> Sent: Wednesday, May 6, 2020 2:34 PM >> >> I understand this is a RACF question . But thought someone can help me >> here . We have a requirement where TSO submit exit IKJEFF10 needs to be >> eliminated . Currently it is written to ensure only those users with >> TSOAUTH(OPER) are allowed to submit jobs with any name . Rest of the users >> are only allowed to submit jobs that begins with their USERID . >> >> Also , the users are not allowed to issue JES commands in batch unless they >> have TSOAUTH(OPER) . Can we get both of these requirements done using RACF >> profiles ? >> Since it's ineffective anyway, just remove it. -- gil ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
