MVSFORUMS.com

iknow · Posted: Wed Jan 11, 2006 8:41 am Post subject: Protect JCL from SJ(Spool)

Hi All,

Can any one tell me Regarding the Parameters that should be coded in the JCL ( job ) so that when any one tries to see the job in spool
(using SJ) it should not be visible . It should show " not authorised
to view"

I didn't know that it can happen. Can anyone tell me whether it is
possible at all?

Mervyn · Posted: Wed Jan 11, 2006 9:10 am Post subject:

You can't code any parameters to do this. It's a RACF issue.
_________________
The day you stop learning the dinosaur becomes extinct

iknow · Posted: Wed Jan 11, 2006 9:22 am Post subject:

Hi,

Could you please elaborate on the RACF issue.

Phantom · Posted: Thu Jan 12, 2006 4:09 am Post subject:

iKnow,

RACF Stands for "Resource Access Control Facility". It provides a means through system programmers provide access rights to each associate depending on their level/designation. As a normal developer we don't have authorization to execute most (almost any) of the RACF commands. If you find any severe security loop holes in your shop, talk to your system programmers and try to get them resolved. Sometime back, we found a security bug in our shop. Everybody had authorization to edit other's libraries, submit jobs on other's ids....We reported them to the concerned person and got it resolved.

This link might be helpful to you.
http://publibz.boulder.ibm.com/cgi-bin/bookmgr/BOOKS/ICHVA202/CCONTENTS?DT=20030618132000

Hope this helps,

Cheers,

Phantom

iknow · Posted: Thu Jan 12, 2006 4:54 am Post subject:

Hi Phantom,

Thanks for your reply.