Mike, For security reasons, REXX Programs can’t normally call an APF Authorized program (it causes it to loose its APF Authorization). There is one exception, from SystemREXX. You would be able to create a SystemREXX that uses LINKMVS/PGM or ATTACHMVS/PGM to call the program and then use CONSOLE to use the ARX (SystemREXX) interface to call it. You would need to Authorize the caller to use the CONSOLE address space and issue the command.
If you haven’t set up the SystemREXX (AXR) address space, you will need to set that up first. You may find that it is better to create an APF Authorized Assembler, COBOL, or PLI program. Either way you go make sure you check authorization of the caller and any passed parameters within the SystemREXX or Program to make sure you do not violate your system integrity. Sent via Al Ferguson’s iPad > On Feb 15, 2023, at 22:46, Mike Hochee <mike.hoc...@aspg.com> wrote: > > Looking for some advice on the simplest way to call an authorized assembler > program from a non-compiled Rexx program under TSO/E in batch, with the > requirement that multiple updatable parameters will be passed. Updating > IKJTSOnn and APF authorizing whatever is not a problem. At issue seems to be > the following... > > The ADDRESS TSO CALL command appears to support only a single non-updatable > parameter string, but does support calling an authorized assembler program. > The LINKMVS, LINKPGM, ATTACHMVS and ATTACHPGM host command environments all > appear to support the passing of multiple updatable parameters, but the Rexx > Reference doc I've been reading in section 'Host Command Environments for > Linking to and Attaching Programs', states that these command environments > are all used to link/attach to... unauthorized programs. > > Is there a way to satisfy both requirements using the LINK* or ATTACH* > command environments or should I be looking at System Rexx or IKJEFTSR or > something else? (I would prefer not to setup System Rexx if there's a > reasonable alternative) > > Thanks much, > Mike > > > > ---------------------------------------------------------------------- > For IBM-MAIN subscribe / signoff / archive access instructions, > send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN > ---------------------------------------------------------------------- For IBM-MAIN subscribe / signoff / archive access instructions, send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN
