Re: How to start a subtask under another user

2006-03-10 Thread Edward E. Jaffe
Richard Tsujimoto wrote: I'm no security expert, but the impression I get from other products that do securitychecking on behalf of other users, is that, as someone earlier posted, a RACROUTE is performed using the subject's userid. It seems inappropriate to have to muck with the TCB. Upd

Re: How to start a subtask under another user

2006-03-10 Thread Walt Farrell
On 3/10/2006 11:08 AM, Wayne Driscoll wrote: As Walt mentioned, ACEE's are not propagated (in retrospect, might not have been the best choice, but its way to late in the game to change). We changed it in the WLM server environment, where we felt we could safely make such a change. The orig

Re: How to start a subtask under another user

2006-03-10 Thread Walt Farrell
On 3/10/2006 11:04 AM, [EMAIL PROTECTED] wrote: In a recent note, Walt Farrell said: Date: Fri, 10 Mar 2006 10:53:09 -0500 He is trying to establish a different security environment within his server, in which all requests made by the system need to be processed as a different user. H

Re: How to start a subtask under another user

2006-03-10 Thread Wayne Driscoll
List [mailto:[EMAIL PROTECTED] On Behalf Of Richard Tsujimoto Sent: Friday, March 10, 2006 8:25 AM To: IBM-MAIN@bama.ua.edu Subject: Re: How to start a subtask under another user >Walt wrote: >The system does not provide propagation of the ACEE to subtasks during >ATTACH except for servers

Re: How to start a subtask under another user

2006-03-10 Thread Paul Gilmartin
In a recent note, Walt Farrell said: > Date: Fri, 10 Mar 2006 10:53:09 -0500 > > He is trying to establish a different security environment within his > server, in which all requests made by the system need to be processed as > a different user. He is not making a request on behalf of an

Re: How to start a subtask under another user

2006-03-10 Thread Walt Farrell
On 3/10/2006 9:25 AM, [EMAIL PROTECTED] wrote: I'm no security expert, but the impression I get from other products that do security checking on behalf of other users, is that, as someone earlier posted, a RACROUTE is performed using the subject's userid. It seems inappropriate to have to muck

Re: How to start a subtask under another user

2006-03-10 Thread Ray Mullins
On Behalf Of Miklos Szigetvari > Sent: Friday March 10 2006 05:16 > To: IBM-MAIN@BAMA.UA.EDU > Subject: Re: How to start a subtask under another user > > Hi > > > Thank you very much, it is working as the subtask has > started another subtask and the TCBSENV

Re: How to start a subtask under another user

2006-03-10 Thread Miklos Szigetvari
Hi I'm no security expert, but the impression I get from other products that do security checking on behalf of other users, is that, as someone earlier posted, a RACROUTE is performed using the subject's userid. It seems inappropriate to have to muck with the TCB. You are propably righ

Re: How to start a subtask under another user

2006-03-10 Thread Richard Tsujimoto
>Walt wrote: >The system does not provide propagation of the ACEE to subtasks during >ATTACH except for servers using WLM message queueing to process work >requests. >You will have to provide that propagation yourself, or ensure that your >code avoids multiple levels of subtasking. I'm no secu

Re: How to start a subtask under another user

2006-03-10 Thread Walt Farrell
On 3/10/2006 8:15 AM, Miklos Szigetvari wrote: Thank you very much, it is working as the subtask has started another subtask and the TCBSENV was not propagated to this TCB I assumed it will inherit from the mother task, but it was not. After copying it, it was o.k. Can I achive , that all sub

Re: How to start a subtask under another user

2006-03-10 Thread Miklos Szigetvari
Hi Thank you very much, it is working as the subtask has started another subtask and the TCBSENV was not propagated to this TCB I assumed it will inherit from the mother task, but it was not. After copying it, it was o.k. Can I achive , that all subtaks inherit the security environment from

Re: How to start a subtask under another user

2006-03-10 Thread Walt Farrell
On 3/9/2006 3:47 PM, Miklos Szigetvari wrote: How can I start a subtask under another userid ? Currently I make an ATTACH DISP=NO RACINIT CREATE copy the ACEE to TCBSENV and aSTATUS RESET,ND seems to have no effect Off-hand it seems like that would work, if you

Re: How to start a subtask under another user

2006-03-10 Thread Binyamin Dissen
BM-MAIN@BAMA.UA.EDU :>Subject: Re: How to start a subtask under another user :> :> :>On Thu, 9 Mar 2006 21:47:05 +0100 Miklos Szigetvari :><[EMAIL PROTECTED]> wrote: :> :>:>How can I start a subtask under another userid ? :> :>:>Currently I make an ATTACH DI

Re: How to start a subtask under another user

2006-03-09 Thread Miklos Szigetvari
Hi -Original Message- From: IBM Mainframe Discussion List [mailto:[EMAIL PROTECTED] Behalf Of Binyamin Dissen Sent: Donnerstag, 09. Marz 2006 22:53 To: IBM-MAIN@BAMA.UA.EDU Subject: Re: How to start a subtask under another user On Thu, 9 Mar 2006 21:47:05 +0100 Miklos Szigetvari

Re: How to start a subtask under another user

2006-03-09 Thread Binyamin Dissen
On Thu, 9 Mar 2006 21:47:05 +0100 Miklos Szigetvari <[EMAIL PROTECTED]> wrote: :>How can I start a subtask under another userid ? :>Currently I make an ATTACH DISP=NO :> RACINIT CREATE :> copy the ACEE to TCBSENV :> and aSTATUS

Re: How to start a subtask under another user

2006-03-09 Thread Ray Mullins
to:[EMAIL PROTECTED] On Behalf Of Miklos Szigetvari > Sent: Thursday March 09 2006 12:47 > To: IBM-MAIN@BAMA.UA.EDU > Subject: How to start a subtask under another user > > Hi > > > How can I start a subtask under another userid ? > &

How to start a subtask under another user

2006-03-09 Thread Miklos Szigetvari
Hi How can I start a subtask under another userid ? Currently I make an ATTACH DISP=NO RACINIT CREATE copy the ACEE to TCBSENV and aSTATUS RESET,ND seems to have no effect -