Locking a JCL or PDS but still executing



TSO Programming, ISPF, SDF, SDSF and PDF, FTP, TCP/IP Concepts, SNA & SNA/IP etc...

Locking a JCL or PDS but still executing

Postby zhinghur » Mon Jan 02, 2012 11:11 pm

Hello,

I have a very typical scenario wherein I am suppose to lock the PDS.
No matter what one cannot access/read/see the data in file by any means.

But they can execute the REX program which holds the JCL.

Is this possible ?

Thanks,
Zhinghur
zhinghur
 
Posts: 48
Joined: Sun Nov 20, 2011 12:25 pm
Has thanked: 0 time
Been thanked: 0 time

Re: Locking a JCL or PDS but still executing

Postby enrico-sorichetti » Mon Jan 02, 2012 11:38 pm

I have a very typical scenario wherein I am suppose to lock the PDS.
No matter what one cannot access/read/see the data in file by any means.

But they can execute the REX program which holds the JCL.


where did You get the idea that the scenario is typical ?
why not speak to Your security support group
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 2994
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 164 times

Re: Locking a JCL or PDS but still executing

Postby zhinghur » Tue Jan 03, 2012 1:29 am

enrico-sorichetti wrote:
I have a very typical scenario wherein I am suppose to lock the PDS.
No matter what one cannot access/read/see the data in file by any means.

But they can execute the REX program which holds the JCL.


where did You get the idea that the scenario is typical ?
why not speak to Your security support group


This solution is not possible in my case. So, is it possible other way around ?
zhinghur
 
Posts: 48
Joined: Sun Nov 20, 2011 12:25 pm
Has thanked: 0 time
Been thanked: 0 time

Re: Locking a JCL or PDS but still executing

Postby enrico-sorichetti » Tue Jan 03, 2012 1:40 am

This solution is not possible in my case. So, is it possible other way around ?


what solution are You talking about ?
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 2994
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 164 times

Re: Locking a JCL or PDS but still executing

Postby Robert Sample » Tue Jan 03, 2012 6:13 am

You need to start over and explain just what you are talking about as you have not been clear so far.

This PDS -- how is it related to the JCL? How are the PDS and JCL related to the REXX program? Why will not DISP=OLD work in your case? Why are you not asking your site security group to restrict the access to the PDS? They would typically be the ones to set the access control for any data set, including your PDS. How long are you wanting to restrict access -- while a job runs? while a program runs? a day? a year? while you work for the organization? while some other condition applies? Are you attempting to violate site security policy and want our help in doing so?

In other words, what you've posted so far leads to a lot more questions and no answers so far.
Robert Sample
Global moderator
 
Posts: 3719
Joined: Sat Dec 19, 2009 8:32 pm
Location: Dubuque, Iowa, USA
Has thanked: 1 time
Been thanked: 279 times

Re: Locking a JCL or PDS but still executing

Postby dick scherrer » Tue Jan 03, 2012 12:20 pm

Hello,

No matter what one cannot access/read/see the data in file by any means.

But they can execute the REX program which holds the JCL.
Which "data in file"? Whoever gave this "direction" should give no more technical directions :? I hate to think that within you IT organization this was clear to multiple people.

But they can execute the REX program which holds the JCL.
How does this relate to the "control" you appear to be looking for? What does this provide for those whould like to help?

You (or whoever presented this to you) needs to provide a much more clear explanation.
Hope this helps,
d.sch.
User avatar
dick scherrer
Global moderator
 
Posts: 6268
Joined: Sat Jun 09, 2007 8:58 am
Has thanked: 3 times
Been thanked: 93 times

Re: Locking a JCL or PDS but still executing

Postby enrico-sorichetti » Tue Jan 03, 2012 1:19 pm

seems to me that the TS is concerned about people looking at the source of the REXX script

for load modules there is the RACF construct execute only dataset ( a bit murky to setup )
not so for the <interpreted> scripts ( CLIST or REXX )

the only way to hide the REXX source is to use the REXX compiler,
but then distributing the executables requires alternate steps in building them
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 2994
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 164 times

Re: Locking a JCL or PDS but still executing

Postby zhinghur » Tue Jan 03, 2012 3:17 pm

Here is a clear scenario in full details

I have a jcl which is kind of tools. This jcl perform takes 2 input file and gives 2 output file.

Now, my requirements are

1. To first lock this jcl so that no users other than me can see it.
2. Trigger this JCL using a REX program.

What this rex will do or holds ?
THis rex will ask for 2 Input files and 2 output files as shown in below link.

As I have no much idea of REX I have already started another topic here,
clist-rexx/topic6906.html

3. These 2 input files names will be replaced by INPUT 1 and INPUT 2 in JCL and same for output.

Finally through Rex, the jcl gets triggered.


Thank You.
zhinghur
 
Posts: 48
Joined: Sun Nov 20, 2011 12:25 pm
Has thanked: 0 time
Been thanked: 0 time

Re: Locking a JCL or PDS but still executing

Postby zhinghur » Tue Jan 03, 2012 3:20 pm

zhinghur wrote:I have a jcl which is kind of tools. This jcl perform takes 2 input file and gives 2 output file.



Sorry for bad English. What I mean here is, the jcl perform some task as per my requirement.

It use 2 input and 2 output files name.
zhinghur
 
Posts: 48
Joined: Sun Nov 20, 2011 12:25 pm
Has thanked: 0 time
Been thanked: 0 time

Re: Locking a JCL or PDS but still executing

Postby enrico-sorichetti » Tue Jan 03, 2012 7:42 pm

truckload of bullshit ...
if the tool is private, then storing everything in Your <private> libraries
will ... ACCORDING TO THE SECURITY POLICIES OF YOUR ORGANIZATION
prevent anybody else from accessing them, the libraries and anything inside them

but if Your organization policy is ( as many do ) for generic users let anybody read and protect only from updates
then You are out of luck and we are just wasting time.

as I said before for such issue the best place to ask is Your security support.

no reason again to waste our time devising and advising about solutions that in the 99.99% will be rejected by the powers of Your organiuzation

if there is the business need for secrecy, Your support will be happy to provide the proper setup
cheers
enrico
When I tell somebody to RTFM or STFW I usually have the page open in another tab/window of my browser,
so that I am sure that the information requested can be reached with a very small effort
enrico-sorichetti
Global moderator
 
Posts: 2994
Joined: Fri Apr 18, 2008 11:25 pm
Has thanked: 0 time
Been thanked: 164 times

Next

Return to TSO & ISPF

 


  • Related topics
    Replies
    Views
    Last post