From: Robin Atwood
Sent: 06 March 2013 21:12
To: '[email protected]'
Subject: Retrieving output submitted by surrogates
This is a rather arcane topic but hopefully one of you out there might have
some insight. I am working on a problem where a customer uses our
application to submit jobs to JES2, and then, when the output is available,
the application reads it from the spool and sends it back to the customer.
This uses the SAPI (function 79) JES2 call and has worked well for years.
Now a customer wants to use a surrogate userid to submit the jobs which run
under various different userids. Submission works fine, as long as the RACF
rules are defined, but when I try to pick up the output, I get RC=4, nothing
found. When constructing the SSS2 I specify the jobid since I know that from
the submit stage. Crucially I set:
MVI SSS2SEL2,SSS2SCRE
MVC SSS2CREA,USERID
where the userid is the surrogate. According to the TSO/E guide:
"With RACF installed, users can be defined to the RACF SURROGAT class. Jobs
submitted by surrogate users can be cancelled and/or viewed by surrogate
users without knowing the user's password"
Which implies what I am doing ought to work. If I clear SSS2SEL2, on our
test system the call works but on the customer's (much more security) it
still fails. SSS2CREA is defined as the "owning userid", so is there a
different way of specifying a surrogate? Or is it necessary to define
JESSPOOL rules to give the surrogate read rights to the output?
Thanks for any illumination!
--
Robin Atwood
----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: INFO IBM-MAIN
