On Fri, 2 Mar 2012 08:34:50 -0600, Betsy Jeffery <[email protected]> wrote:
>I'm beginning to think it can't. I think Rob Scott is correct - I should >write a stub using IKJEFTSR. I found the following from Walt Farrell in a >different list: >"Therefore, since Rexx itself is not running authorized, your Rexx exec cannot >simply call another program and have that program run authorized." > REXX -cannot- simply "call" another program and have it run authorized. That's why you need the TSO/E CALL -command- not the REXX call -statement-. The TSO/E CALL command -can- call programs and have them run authorized, if they're properly specified in IKJTSOxx and they exist in a properly authorized library. -- Walt Farrell IBM STSM, z/OS Security Design ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to [email protected] with the message: INFO IBM-MAIN
