On Wed, 4 Sep 2019 14:06:21 -0400, Bob Bridges wrote: > >One argument management offers in mitigation is that most of these CICS users >don't have TSO, so they haven't the ability to submit batch jobs. Off-hand I >can't contradict them, but I'm skeptical. I'm thinking there's probably a way >and I just don't know about it. Can anyone confirm? If I were a CICS user >without the ability to log on to TSO, could I still submit a batch job somehow? > Don't know about CICS. But, for example:
https://www.ibm.com/support/knowledgecenter/en/SSLTBW_2.2.0/com.ibm.zos.v2r2.bpxa400/jclsub.htm Or FTP. Or anything that can allocate INTRDR and write to it. Your concerns ought to be addressable by exits but, SMOP. Does CICS retain any information about who logged in? Would you expect the person submitting a job to be prompted for ID and password? -- gil ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
