On Mon, 18 Nov 2019 20:03:59 +0000, Seymour J Metz <sme...@gmu.edu> wrote:

>What do you mean by "the initial program"? The TMP doesn't need to be in any 
>list.
>
>There are a few caveats on authorization.
>
>   Whether the entire linklist is autoorized depends on what you have in 
> PARMLIB.
>
>   Anything in the LPA is authorized.

No, but that's a common misconception (or, perhaps, a common mis-statement).

The correct statement is: anything in LPA is considered to reside in an 
authorized library.

What that means is:
1. It can be loaded by something that is running either unauthorized or 
authorized (APF, system key, or supervisor state). When loaded, the state of 
the running program's authorization is not changed. (I will ignore the further 
complications that can be imposed by RACF Program Control, as those are not 
really related to authorized vs unauthorized.)

2. If it is loaded by the Initiator as a jobstep program, and it is linked 
AC(1), it will run APF-authorized. (I will ignore possible JOBLIB/STEPLIB 
effects.)

3. If it is run under TSO and is in the appropriate IKJTSOxx list (AUTHPGM, 
AUTHCMD, AUTHTSF) for the way it was run, it will run APF-authorized. (Again, 
ignoring possible JOBLIB/STEPLIB effects.)

But it is only truly "authorized" if it is loaded by an already-authorized 
program in case 1, or when cases 2 or 3 apply.

-- 
Walt

----------------------------------------------------------------------
For IBM-MAIN subscribe / signoff / archive access instructions,
send email to lists...@listserv.ua.edu with the message: INFO IBM-MAIN

Reply via email to