I think the rule is "good programmers clean up after themselves; bad ones don't - AC=1 is irrelevant."
There is only a very weak correlation between AC=1 and being a jobstep program. Any programmer who assumes that correlation is strong is I think by definition "bad." Anyone who says "my program will only ever be run as a jobstep program" is either (a.) doing a bad job of designing the program, i.e., designing with limited usefulness; (b.) lacking in vision; and/or (c.) too lazy or rushed to code de-allocates. Charles -----Original Message----- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] On Behalf Of Paul Gilmartin Sent: Tuesday, September 19, 2006 7:32 AM To: [email protected] Subject: Re: Why AUTHPGM? In a recent note, Binyamin Dissen said: > Date: Tue, 19 Sep 2006 10:34:18 +0300 > > On Mon, 18 Sep 2006 17:51:14 -0600 Paul Gilmartin <[EMAIL PROTECTED]> > wrote: > > :>I am coming to suspect that the reason RETRY fails when I > :>invoke SMP/E from an EXEC under IKJEFT01 is that GIMSMP > :>is absent from AUTHPGM NAMES in SYS1.PARMLIB(IKJTSOnn). > :>I've put in a request to add it. > > :>But, now I'm curious. Is there any good rationale that > :>any program with AC=1 in an authorized library shouldn't > :>run with APF authorization when CALLed from TSO. Is the > :>security provided by the "isolated environment" incomplete? > :>What happens when a program with AC=0 is (inadvertently) > :>entered in AUTHPGM names and CALLed? > > The issue is that AC=1 programs expect to be called as job-step programs and > may not completely clean up after themselves (expecting the initiator to do > it). > That raises more questions than it answers: o How justified is that expectation? Don't numerous authorized utilities and authorized user and vendor programs invoke other authorized utilities? o Isn't it equally true that AC=0 programs may fail to clean up after themselves? ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
