On Tue, 21 Jun 2011 16:51:05 -0400, Shmuel Metz (Seymour J.) <[email protected]> wrote:
>In <listserv%[email protected]>, on 06/20/2011 > at 09:57 AM, Walt Farrell <[email protected]> said: > >>True, but not if it simply LINKs or ATTACHes IDCAMS (which might be >>the immediate choice of most programmers). It would have to use >>IKJEFTSR, > >There are other ways, but they all involve the TMP testing for >authorization before running the request in a parallel task. Note that >authorized call and authorized service are controlled by distinct >lists. That processing is part of IKJEFTSR, Shmuel. I suppose one -could- build an appropriate parm list and directly ATTACH the TSO/E CALL command, which (I think) would result in CALL using IKJEFTSR on your behalf. But of course the intended way for you to invoke the CALL command is via IKJEFTSR directly. And via IKJEFTSR you could simply invoke IDCAMS without using CALL. So if you know a way that doesn't directly or indirectly involve IKJEFTSR I'd like to hear. -- Walt Farrell IBM STSM, z/OS Security Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
