switching tso userid in rexx



IBM's Command List programming language & Restructured Extended Executor

switching tso userid in rexx

Postby dliang » Sat Aug 15, 2009 3:23 pm

Has anyone tried switching the TSO/RACF userid in the middle of a rexx execution? Here's why I need to do this: Half way into processing my rexx, I need to execute some DB2 commands under a different racf userid that has been granted appropriate Db2 privileges.

Thanks,
David
dliang
 
Posts: 2
Joined: Sat Aug 15, 2009 3:11 pm
Has thanked: 0 time
Been thanked: 0 time

Re: switching tso userid in rexx

 

Re: switching tso userid in rexx

Postby dick scherrer » Sun Aug 16, 2009 7:45 am

Hello and welcome to the forum,

What a horrible idea. . . This would violate the security policy of any organization. . .

If you believe there is a business reason for you to issue restricted commands, you need to have your management upgrade your permissions.
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6304
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 91 times

Re: switching tso userid in rexx

Postby dliang » Mon Aug 17, 2009 2:23 am

Hi Dick:
Thanks for getting back to me.

I know, the idea sounds odd and cumbersome, but the whole business reason is about "control on certain priviledged db2 maintenance functions". When it comes to executing one of these privileged DB2 functions, no developer is allowed to do it except for the powerful racf userid whom I'm trying to switch/surrogate to in my rexx.

Appreciate your feedback, and I'll keep researching into a workaround.

Regards,
David.
dliang
 
Posts: 2
Joined: Sat Aug 15, 2009 3:11 pm
Has thanked: 0 time
Been thanked: 0 time

Re: switching tso userid in rexx

Postby dick scherrer » Mon Aug 17, 2009 4:29 am

Hello,

the idea sounds odd and cumbersome
No, just wrong. Many/most developers believe they should also be able to do whatever they want ;)

no developer is allowed to do it
Of course not. . . Which is quite normal.

I'll keep researching into a workaround.
"Beating the system" is grounds for termination many places. . .

If there is truly a business reason ("I want" is not a business reason) speak with your management to have your id upraded.
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6304
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 91 times


Return to CLIST & REXX

 


  • Related topics
    Replies
    Views
    Last post