[Info-vax] Restrict the use of SUBMIT/USER= to one particular user.
abrsvc
dansabrservices at yahoo.com
Mon Nov 7 09:32:24 EST 2016
>
> Granted - Submit/user does require CMKRL priv. and while less
> secure, this approach is likely an easier workaround than
> changing the existing job code.
>
> Just to clarify - was CMKRNL required to execute the job itself
> or simply to be able to execute the "submit/user" command?
>
> If not required for the job itself, them imho, the better
> approach would be to update the job logic.
>
>
My read says that the CMKRL was required to submit the job as another user and not for the program itself. Thats why I suggested submitting the request to another job that was the correct "user". In this way additional checks are trivial to verify that a user is allowed to run the task etc.
Just a matter of DCL programming...
Dan
More information about the Info-vax
mailing list