System commands can be issued in batch JCL via the following JCL statement // SETPROG APF,ADD=DSNAME=make.this.apf.aut,SMS
Now, the ABILITY to do this can be limited first by JES2 with the COMMAND= option of the JOBCLASS definition. COMMAND can be VERIFY, DISPLAY, EXECUTE or IGNORE If VERIFY, first the operator will have to reply to allow the command execution to begin, with DISPLAY a WTO will be issued and command execution will begin, with EXECUTE it will begin execution, and with IGNORE the command won't be executed. Once the command is submitted for execution, then the security system gets involved to see if the job owner has the authority to execute the command. Basically COMMAND=VERIFY was designed back in the days before SAF protection was available for system commands. ============================================== Wayne Driscoll OMEGAMON DB2 L3 Support/Development wdrisco(at)us(dot)ibm(dot)com All opinions are mine, and do not represent IBM Corporation. ============================================== IBM Mainframe Discussion List <[email protected]> wrote on 06/25/2014 10:55:37 AM: > From: zMan <[email protected]> > To: [email protected], > Date: 06/25/2014 11:04 AM > Subject: Re: [IBM-MAIN] setprog command RACF issue > Sent by: IBM Mainframe Discussion List <[email protected]> > > So revealing more of my vast ignorance: the OP seems to be suggesting that > operator commands can be issued from a batch job. I just spent 10 minutes > Googling and didn't find a description of how to do this. Can someone post > the JCL for a job to issue, say, a SETPROG? Will it always require operator > response? We have various test environments that need a series of operator > commands, and if I could put them into a job (or a Rexx program--is it also > possible to issue them from Rexx?), it would make life easier. > > > On Tue, Jun 24, 2014 at 4:31 PM, Walt Farrell <[email protected]> > wrote: > > > On Tue, 24 Jun 2014 11:28:26 +0530, Mainframe Mainframe < > > [email protected]> wrote: > > > > >3) Do I have to make any changes in RACF to avoid these issues. > > > > As another list member indicated, you should look up the ICH70007I message > > and take the actions indicated in the book. > > > > -- > > Walt > > > > ---------------------------------------------------------------------- > > For IBM-MAIN subscribe / signoff / archive access instructions, > > send email to [email protected] with the message: INFO IBM-MAIN > > > > > > -- > zMan -- "I've got a mainframe and I'm not afraid to use it" > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to [email protected] with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
