It may be JCL or it may be some control card to a program executed by the JCL.
Might be an idea to ask your boss if you can go and talk to the "RACF people" so you can understand how things are set up at your site and what you can and can't do. Migth sooth them and make them feel needed as well
Yes. See the RACF people at your site. They can explain the setup at your site. We can't. I'm not saying you can't tell by following up all the messages, but I am saying it will be useful to talk to them anyway so you understand what the RACF policy is as it applies to you as a developer.