Please use google and search the IBM-Main archives for JSCBAUTH for *many* discussions about why you should not be flipping it on and off.
Apart from the fact that it is difficult to secure any facility that elevates the authority of the caller, there is also the multi-tasking aspect to consider. The JSCBAUTH flip technique is analogous to something like the following : Someone is in the habit of leaving a unloaded gun on a table in a house with kids running around. No-one gets hurt as there is no ammunition in the house, so the kids happily pick up and play with the gun and put it back. Someone decides that they want to use the gun for hunting, so they load up a bullet and prepare to leave the house but get distracted by a phone call. They put the gun back on the table while they take the call and tell themselves to remember to unload it. Meanwhile some kid who has knocked back a fair amount of sugar, runs into the room, grabs the gun and starts play-shooting..... Rob Scott Lead Developer Rocket Software 77 Fourth Avenue . Suite 100 . Waltham . MA 02451-1468 . USA Tel: +1.781.684.2305 Email: [email protected] Web: www.rocketsoftware.com -----Original Message----- From: IBM Mainframe Discussion List [mailto:[email protected]] On Behalf Of dpewen Sent: 05 March 2014 15:10 To: [email protected] Subject: ISPF Storage Protection Hello, I started this thread and I appreciate all the input I received from this list. I have solved the problem by adding code to my user svc that is part of the product. I added two functions to the svc: 1. to turn on the APF-auth bit in the job step TCB 2. to turn off the APF-auth bit in the job step TCB This allows me to issue the MODESET svc successfully. ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
