In z/OS 2.4, with the ACEECHK class active that will require special 
authorization.

Wayne Driscoll
Rocket Software
Note - All opinions are strictly my own.

-----Original Message-----
From: IBM Mainframe Discussion List <IBM-MAIN@LISTSERV.UA.EDU> On Behalf Of 
Charles Mills
Sent: Monday, November 18, 2019 12:11 PM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: AUTHPGM in IKJTSOxx

An authorized program would not need to switch TO a SPECIAL userid, it could 
simply give itself SPECIAL in its ACEE.

Charles


-----Original Message-----
From: IBM Mainframe Discussion List [mailto:IBM-MAIN@LISTSERV.UA.EDU] On Behalf 
Of Walt Farrell
Sent: Monday, November 18, 2019 9:52 AM
To: IBM-MAIN@LISTSERV.UA.EDU
Subject: Re: AUTHPGM in IKJTSOxx

On Mon, 18 Nov 2019 10:54:06 -0500, scott Ford <idfli...@gmail.com> wrote:

>So guys, stupid question what about a STC that provisions for RACF, etc.
>But the design is as a normal generalized user, but with a id with
>SPECIAL that is invoked only during the time of passing the command to
>RACF ? Does it have to be APF authorized for RACF command access or am
>i misunderstanding my readings ?

If the program starts out under user ID A, and needs to switch to user ID B (as 
you seem to indicate it does), then it will need some kind of authorization to 
switch its identity.

That authorization could be APF-authorization, or supervisor state, or system 
key. Or if the program is running in a UNIX System Services environment on z/OS 
and the program has appropriate UNIX server authorization, it could use UNIX 
functions to change its identity.

So without more details we can't say what your program would need to do, or 
exactly what kind of authorization it would need.

--
Walt

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions, send email to 
lists...@listserv.ua.edu with the message: INFO IBM-MAIN
================================
Rocket Software, Inc. and subsidiaries ■ 77 Fourth Avenue, Waltham MA 02451 ■ 
Main Office Toll Free Number: +1 855.577.4323
Contact Customer Support: 
https://my.rocketsoftware.com/RocketCommunity/RCEmailSupport
Unsubscribe from Marketing Messages/Manage Your Subscription Preferences - 
http://www.rocketsoftware.com/manage-your-email-preferences
Privacy Policy - http://www.rocketsoftware.com/company/legal/privacy-policy
================================

This communication and any attachments may contain confidential information of 
Rocket Software, Inc. All unauthorized use, disclosure or distribution is 
prohibited. If you are not the intended recipient, please notify Rocket 
Software immediately and destroy all copies of this communication. Thank you.

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to