Shmuel, Thank you for your responses, this and previous.
I concur w/what you've said and w/what others have said. Before I go on, as Peter pointed out, I admit that I've used incorrect terminology (e.g. call / invoke a SRB) and I apologize. That said, AFAIK, there's really not much, save but for a RACROUTE REQUEST=AUTH perhaps, that I could do in terms of validation, I could do. Then again, even w/a RACROUTE/AUTH, it still does not guarantee integrity. All the above does is to make things a little harder for inappropriate users. Perhaps that is all we can do ??. I've taken everybody's suggestions and advice and think I've, decided to take a slight variation to PC / SVC's, use RACROUTE and have a separate load library that will be clearly documented as needing to be APF'd. Though I am responding to Shmuel, I thank everybody for taking the time to respond / advice. Once again, thank you everybody. Kind Regards. Jim Thomas -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of Shmuel Metz (Seymour J.) Sent: Sunday, December 01, 2013 5:12 PM To: [email protected] Subject: Re: Un-authorized caller calling authorized services. In <[email protected]>, on 11/30/2013 at 08:25 PM, Jim Thomas <[email protected]> said: >In a nutshell, I'm trying to find out what the best way is for an >un-authorized called to call / invoke a SRB. It can't. The only ways for unauthorized code to invoke authorized services are PC and SVC. You need an interface service (either PC or SVC) that will accept parameters, validity check everything and schedule the SRB. -- Shmuel (Seymour J.) Metz, SysProg and JOAT ISO position; see <http://patriot.net/~shmuel/resume/brief.html> We don't care. We don't have to care, we're Congress. (S877: The Shut up and Eat Your spam act of 2003) ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
