Yes. The "other" alternative is to not protect OPERCMDS (i.e. let everything be authorized), but that's really not a good option.
It's not a difficult process, and for the simplistic stuff you are doing to modify a simple started task, it's just the MVS.MODIFY.STC.** one you have to worry about for now, or you can limit it to just the specific STC via MVS.MODIFY.STC.membername.id where membername is the name of the member containing the JCL source and ID is the actual STC ID. If your JES2 Proc for the task is FRED and the ID of the task is also FRED (which is mostly normal), then the entire profile is "MVS.MODIFY.STC.FRED.FRED". But as I said, for now you can just use MVS.MODIFY.STC.** and that will allow you to modify any started task. Brian On Mon, 31 Aug 2020 09:48:51 +0400, Peter <dbajava...@gmail.com> wrote: >Thank you for your response > >So I believe I need to introduce RACF OPERCMDS even if it is maintained by >ISFPRMXX. > > > >On Mon, 31 Aug, 2020, 9:11 am Brian Westerman, < >brian_wester...@syzygyinc.com> wrote: > >> Even if you maintain SDSF via SAF (which you have to do by z/OS 2.5 >> because that's all that will be supported) you will still have to update >> the RACF OPERCMDS class (TSO RACF option 2 (general resource profiles)). >> >> The profile name you need to update (for MVS batch and STC's) is >> MVS.MODIFY.**, for JES2 related stuff it would be JES2.MODIFY.**. I made >> it simplistic by using the ** after the modify. You can actually get >> pretty specific about what tasks are allowed to be modified by whom, but I >> figured you just wanted to get around your problem right now. >> >> Brian >> >> ---------------------------------------------------------------------- >> For IBM-MAIN subscribe / signoff / archive access instructions, >> send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN >> > >---------------------------------------------------------------------- >For IBM-MAIN subscribe / signoff / archive access instructions, >send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
