Yes indeed, if an unwashed user can update the member passed to RDR then all 
bets are off.

I would guess that if anything the "STC userid" would likely have more access 
than was desirable.

I am not proposing this as a universal solution; I am proposing it as MY 
solution.

Charles


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf 
Of Tom Brennan
Sent: Thursday, November 19, 2020 11:14 AM
To: [email protected]
Subject: Re: Is there a JES2 command to submit a job?

So if the JCL dataset can be updated by the user and they decide to 
remove the USER= parm, then the STC userid would get control.  And in 
that case the unique userid set up for that STC would have little access 
and would likely fail on the first dataset.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN

Reply via email to