Aman, If your intent is to allow these individuals to perform a limited set of RACF administrative tasks without giving them RACF authority, you'll need write an APF-authorized program they can execute to perform the tasks. Alternatively, you can let them keep their RACF authority and write a RACF IRREVX01 command processing exit to restrict the scope of their authority. You won't be able to accomplish this with normal Panels/REXX, nor will using batch with a SURROGAT ID give you effective control. Call if you wish to discuss these options in more detail.
Regards, Bob ------------------------------------------------------------------------ Robert S. Hansel | 2008 RACF Training (January - July) Sr. RACF Specialist | > Intro & Basic Admin - Boston - APR 29 - MAY 1 RSH Consulting, Inc. | > Audit for Results - Boston - MAY 20-22 www.rshconsulting.com | 617-969-8211 | Visit our website for registration & details ------------------------------------------------------------------------ -----Original Message----- Date: Sat, 5 Jan 2008 16:34:11 -0600 From: Aman Naqvi <[EMAIL PROTECTED]> Subject: how to cut down RACF auth & run rexx under diff auth Dear all, We have two security operations teams who are defined in RACF with the group-Special attribute and hold CLAUTH on a class to define profiles. The issue is that we need to cut down their access. The task is to only provide these teams access through Panels/REXX and to cut off their group-Special attribute and Class authority. My problem is that if the REXX executes online it is executing under the authority of the user (who's access im trying to cut down) Any ideas how I can achieve this without going to batch? Thanks. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [EMAIL PROTECTED] with the message: GET IBM-MAIN INFO Search the archives at http://bama.ua.edu/archives/ibm-main.html
