[Info-vax] Restrict the use of SUBMIT/USER= to one particular user.

abrsvc dansabrservices at yahoo.com
Mon Nov 7 09:32:24 EST 2016


> 
> Granted - Submit/user does require CMKRL priv. and while less
> secure, this approach is likely an easier workaround than
> changing the existing job code.
> 
> Just to clarify - was CMKRNL required to execute the job itself
> or simply to be able to execute the "submit/user" command? 
> 
> If not required for the job itself, them imho, the better
> approach would be to update the job logic.
> 
> 
My read says that the CMKRL was required to submit the job as another user and not for the program itself.  Thats why I suggested submitting the request to another job that was the correct "user".  In this way additional checks are trivial to verify that a user is allowed to run the task etc.
Just a matter of DCL programming...

Dan




More information about the Info-vax mailing list