We want to be able to control output to SYSOUT datasets on the spool when 
accessed via SDSF. So for example we may want to allow access to the spool 
dataset assigned to a SYSPRINT DD statement and deny access to a spool 
dataset with a REPORT DD statement.  I know that we can define relevant 
profiles in the JESSPOOL class as detailed in the SDSF customisation manual 
but the problem is associating the JES temporary dataset name with the DD 
statement it is used on. Unless the DSNAME parameter is coded on the output 
dataset the allocated JES temporary dataset will end with a ? for example the 
following JCL

//TEST  EXEC PGM=IEFBR14         
//DD1  DD SYSOUT=X               
//DD2  DD SYSOUT=X               
//DD3  DD SYSOUT=X,DSNAME=&&DD3

causes the following to be allocated.
IEF285I   COSSNJ9.COSSNJ1B.JOB96806.D0000101.?         SYSOUT  
IEF285I   COSSNJ9.COSSNJ1B.JOB96806.D0000102.?         SYSOUT  
IEF285I   COSSNJ9.COSSNJ1B.JOB96806.D0000103.DD3       SYSOUT

So if we add a DSNAME parameter to a spool dataset that we wish to protect 
this allows us to define a suitable RACF profile in the JESSPOOL class.

My question is what is the best way of achieving this? 
Please assume that we do not wish to mass change the JCL in the production 
libraries using a source management package, a JCL tool such as JOBSCAN, 
JCLPREP, JCLCHECK etc, or an edit macro etc.

This is a JES2 system at Z/OS 1.11 using RACF security. I think this can be 
done by using JES exit 4 and exit 40 to add a DSNAME parameter to JES 
output datasets as we see fit which would probably be to make the 
DSNAME=&&XX where XX is the DDNAME of the current JCL statement.

I have down loaded some of the JES2 mods from the CBT tape but have not 
managed to find (it may of course exist) a suitable example to change.

Any ideas on other ways of achieving this e.g. by mods to SDSF itself or using 
other exit points. 

Has anyone got a suitable exit they may be willing to share?


 

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to [email protected] with the message: GET IBM-MAIN INFO
Search the archives at http://bama.ua.edu/archives/ibm-main.html

Reply via email to